Audit events using Splunk - integration paths ?

[ROBERTO RONCOLATO]

Hi,

A customer request us to provide information on how integrate IM audit and Splunk.

CA IM provide auditing capabilities OOTB: https://docops.ca.com/ca-identity-manager/14-3/EN/configuring/auditing

I am wondering if anyone already has used Splunk to collect IM audit events and can provide some input on this.

kind regards,
Roberto

[Kenneth Verrastro]

There is an Idea out there already. Please see the below link:

https://community.broadcom.com/participate/ideation-home/viewidea?IdeationKey=0443e115-4442-43b9-a2b4-fe8d72cdf678

Perhaps there are others in the communities who have experience in doing this and we invite them to comment here also.

Another option may be to reach out to our partner HCL Technologies to see in what way they can assist further. The Enterprise Studio team of HCL can be reached at [e-mail]. https://www.hcltech.com/enterprise-studio