name: Splunk
id: d8a2c791-460b-4756-a8e5-ecade77b21e3
author: Patrick Bareiss, Splunk
source: splunkd_ui_access.log
sourcetype: splunkd_ui_access
supported_TA: {}
event_names: []
fields:
  - _time
  - action
  - date_hour
  - date_mday
  - date_minute
  - date_month
  - date_second
  - date_wday
  - date_year
  - date_zone
  - dest
  - host
  - index
  - info
  - linecount
  - punct
  - source
  - sourcetype
  - splunk_server
  - timeendpos
  - timestamp
  - timestartpos
  - user
example_log:
  "Audit:[timestamp=01-25-2023 22:08:54.818, user=admin, action=search,
  info=granted REST: /search/jobs/rt_1674684525.24/events]"