Skip to main content
Splunk Lantern

Finding interactive logins from service accounts

Applicability

  • Product: Splunk Enterprise or Splunk Cloud
  • Feature: Search
  • Function: Login auditing

Problem

Most service accounts should never interactively log into servers. You want to actively monitor your servers so you can quickly investigate if this happens.

Solution

Additional resources

For more great content from the Splunk Education and Training team, check out Splunk How-To on YouTube or sign up for a course

  • Was this article helpful?