Linux Data Sources

Name	Platform	Sourcetype	Source	Supported TA	Date
Linux Auditd Daemon Abort	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Daemon End	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Daemon Start	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Add User	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Execve	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Path	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Proctitle	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Service Stop	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Auditd Syscall	Linux	auditd	auditd	Splunk Add-on for Unix and Linux
Linux Secure	Linux	linux_secure	/var/log/secure	Splunk Add-on for Unix and Linux
Sysmon for Linux EventID 1	Linux	sysmon:linux	Syslog:Linux-Sysmon/Operational	Splunk Add-on for Sysmon for Linux
Sysmon for Linux EventID 11	Linux	sysmon:linux	Syslog:Linux-Sysmon/Operational	Splunk Add-on for Sysmon for Linux