I'd very much like to use the Auditd app to monitor various security aspects of our systems. However, I note on the Auditd page that Splunk 7 is not listed.
Will Auditd work with Splunk 7 despite the version not being listed?
I’m not aware of any reason it shouldn’t work with Splunk Enterprise 7.0, however I haven’t yet had an opportunity to thoroughly test and have it certified against Splunk Enterprise 7.0. Could you please indicate here if any issues occur when you do install?
