We are testing the Supercharger Application with a Splunk Free Installation.
During the installation and configuration we already recognized missing Options mentioned in the installation manual, compared with the option we had in the System:
The "App context" and the predefined logbinder Index are missing.
So in the moment we can see that data, like changed Users or Groupmemerships, but we cannot see detailed information. The information is in the forwarded Event, we can confirm that in the WinEvent Log. But in the dashboard we don't see these necessary information.
Our system: Windows Server 2016, Supercharger Manager 126.96.36.199, Splunk 7.2.6, Logbinder for Splunk 1.1.12.
Attached the comparison between our possible settings, and the settings in the manual.
Thanks in advance