search cancel

Forwarding view submitted tasks VST transactions to splunk

book

Article ID: 255545

calendar_today

Updated On:

Products

CA Identity Manager

Issue/Introduction

Our security team is looking to capture all the events from a central location to monitor and wanted to know how to send all the VST transactions to splunk. is there a way to get the VST details in a splunk logs?

Environment

Identity Manager 14.X

Resolution

The VST is populated by user searches and is not recorded in a log.

These searches are performed against the task persistence database at the time the user clicks on View submitted tasks, then performs a search