Linux Auditd app: Does it works with Splunk 7?

[labkey_mikeb]

Hello,

I'd very much like to use the Auditd app to monitor various security aspects of our systems. However, I note on the Auditd page that Splunk 7 is not listed.

Will Auditd work with Splunk 7 despite the version not being listed?

-- Mike Beebe

[doksu]

I’m not aware of any reason it shouldn’t work with Splunk Enterprise 7.0, however I haven’t yet had an opportunity to thoroughly test and have it certified against Splunk Enterprise 7.0. Could you please indicate here if any issues occur when you do install?