Files
splunk-security_content/macros/audit_searches.yml

4 lines
158 B
YAML

definition: index=_audit sourcetype=audittrail action=search
description: Macro to enable easy searching of audittrail logs for searches
name: audit_searches