Hi, im struggling to see how i can get the cluster_name that is set in config to appear in the audit log, so it is possible to filter by cluster in splunk. The audit device im using is file. Any suggestions?
Hi, im struggling to see how i can get the cluster_name that is set in config to appear in the audit log, so it is possible to filter by cluster in splunk. The audit device im using is file. Any suggestions?