Skip to main content


Splunk Lantern

Monitoring badges for facilities access

Scenario: Many modern organizations, especially ones with highly sensitive data to safeguard, require employees to use badges to enter buildings and sometimes even select rooms within those buildings. They may also require badges to pass through turnstiles, parking gates, or other barriers. In some industries, badge data must be audited regularly and reported on for compliance reasons. In others, the organization may simply want to have that information for their own records, or track badge usage for malfunctions so they can quickly address them. The searches in this use case help an organization complete all these function to keep physical assets safe.


To succeed in implementing this use case, you need the following dependencies, resources, and information.

Your sourcetypes may not have the same fields as the ones demonstrated in the sample searches. You may also need to adjust field names to match what is available in your lookup files. 

How to use Splunk software for this use case

Depending on what information you have available, you might find it useful to identify some or all of the following: 


The results of these searches can be useful in security, compliance, or customer reporting requirements. They may also be used for activity logging and HR related requests.

Additional resources

The searches in this guide are also included in the  Splunk Essentials for Telecommunications the app, which provides more information about how to implement them successfully in your telecom services maturity journey. In addition, this Splunk resource might help you understand and implement this use case:

  • Was this article helpful?