For example, if you create a Dashbaord and I modify it
I want to see a log somewhere in splunk which tell I modified it.
Is there a way i can create a Dashboard that i want to see a log somewhere in splunk which tells who modified a dashboard and when
try this: Better Audit Logs | Ideas (splunk.com)
Hi,
You can find it use this search:
index=_internal editxml
hello there,
its in the _internal access logs.
see answer here:
https://answers.splunk.com/answers/317274/how-can-i-determine-who-modified-a-dashboard.html
hope it helps