Splunk reference app – PAS

Splunk's Pluggable Auditing System (PAS) (originally available as version 1.0 back in January 2015) is a Splunk App designed to describe how to develop Splunk apps. It is intended to present recommended practices in addition to the Splunk developer platform.

PAS also:

  • Enables you to monitor countless document repositories to track who has viewed, modified, deleted, or downloaded documents or other artifacts from numerous sources
  • Detects suspicious activities
  • Analyzes trends

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.