Top 10 Systems Administrator Searches

Comments

6 comments

  • Avatar
    Yoway Buorn

    Have you installed the ** Linux App** ?  Each of the panels runs a query which you can load by clicking on the panel.

    0
    Comment actions Permalink
  • Avatar
    Kevin Francis

    Agreed. Linux App would be the best place to start for this.  A whole host of searches from password changes to root activity to system events and auditing included in this app. Our Unix team has taken advantage of these searches already being written for us.. no need to recreate the wheel.

    0
    Comment actions Permalink
  • Avatar
    Alexander Marsh

    Thanks, this looks like a great place to start.

    0
    Comment actions Permalink
  • Avatar
    Richard Puglisi

    Hello,

    We have been running the two different versions of the linux root activities scripts and they are returning no results. Any help or ideas for be appreciated. Thank you.

    Richard 

    0
    Comment actions Permalink
  • Avatar
    Colin Corstorphine

    Hi Richard,

    There are a few possibilities here. It's possible that your Linux logs are in a different format than our parsers expect, you may not have experienced the events that the query is looking to detect, or your time range may not encompass the period when these events could have occurred. We'll reach out directly to review with you.

    -C.b.C.

    0
    Comment actions Permalink

Please sign in to leave a comment.