Hello Forum is deep knowledge/understading of all single subject courses ( https://education.splunk.com/single-subject-courses) required to pass  the SPLK-1001 exam? Thank you very much! Bill   ... View more

Hello Forum I heard that Splunk together with OSquery can detect processes running without a binary on disk. Can this OSquery be installed on the Splunkt-server in order to be able to query the clients to be monitored or is a local installation on every client required? Can it be customized to alarm automatically when this case happend (processes running without a binary on disk)? Thank you! Bill ... View more

Hello community I heard that Splunk does support fileintegrity-monitoring. Only on the host where Splunk is installed, or are Splunk-agents for Windows- and Linux-machines available and on all Splunk-versions (Enterprise, and Light) ? Thank's for your feedback! Bill ... View more