Files
splunk-security_content/macros/linux_auditd.yml
T
2024-08-09 10:46:52 +02:00

4 lines
221 B
YAML

definition: sourcetype="linux:audit"
description: customer specific splunk configurations(eg- index, source, sourcetype).
Replace the macro definition with configurations for your Splunk Environmnent.
name: linux_auditd