Hi guys ,
Currently i am working for client and setuping the splunk . currently there are two admin of the splunk.
My question is can i get an alert if other admin setup new monitor as i am also the admin so currently i am asking other admin that what changes he has done . But i want to setup an monitoring for configrations files like is some body(admin) alter the content of the conf file or add more monitors so i should get an alert so no need to ask the other admin.
can it be done by splunk .
Please help.
hello @kannu,
this answer seems as a good one:
https://answers.splunk.com/answers/448625/how-to-monitor-changes-made-to-the-inputsconf-file.html
hope it helps
hello @kannu,
this answer seems as a good one:
https://answers.splunk.com/answers/448625/how-to-monitor-changes-made-to-the-inputsconf-file.html
hope it helps