name: Splunk
id: d8a2c791-460b-4756-a8e5-ecade77b21e3
version: 1
date: '2024-07-18'
author: Patrick Bareiss, Splunk
description: Data source object for Splunk
source: splunkd_ui_access.log
sourcetype: splunkd_ui_access
supported_TA: []
fields:
- _time
- action
- date_hour
- date_mday
- date_minute
- date_month
- date_second
- date_wday
- date_year
- date_zone
- dest
- host
- index
- info
- linecount
- punct
- source
- sourcetype
- splunk_server
- timeendpos
- timestamp
- timestartpos
- user
example_log: 'Audit:[timestamp=01-25-2023 22:08:54.818, user=admin, action=search,
  info=granted REST: /search/jobs/rt_1674684525.24/events]'