Splunk App for Nextcloud

🏷️ General
1

A new version of the “Splunk App for Nextcloud” has been released, two new dashboards added. This app is the probably the most complete Nextcloud monitoring solution.

An installation guide can be downloaded here:

To access the Splunk, go to the Splunk App Store:
https://splunkbase.splunk.com/app/3398/

The Splunk app currently has the following dashboards:

  • Overview.
    • Current status of the Nextcloud server (available, in maintenance, web server down, host unavailable).
    • Status breakdown for time period.
    • Successful and failed logins and ratio of the same.
    • Number of defined and active users.
    • Number of total shares and number of file operations.
  • Nextcloud System Information.
    • Information about current Nextcloud server configuration.
    • Timeline of Nextcloud server upgrades.
  • Users.
    • Number of defined and active users.
  • Shares and Storage.
    • Number of shares, federated shares, files and free disk space.
  • Sharing actions.
    • Who has shared (or unshared) what, with whom, how (public, user or group shares) and when.
  • File and Folder Activity.
    • What file or folder operations have been performed by whom, when, from where. Ability to filter the file and folder activity by country and/or user.
  • Public File Access.
    • What has been accessed via public shares, when and from where.
  • Hardware information.
    • CPU load averages, free and used memory, database size.
  • User/Group Operations.
    • When and by whom were users created or deleted, disabled or enabled, added or removed from groups, groups created or deleted.
  • Password Changes.
    • Who has or have had had their password changed, who changed it and from where. What password reset attempts have there been.
  • User Login Activity.
    • Login activity over time and by location. Full login activity audit trail. Ability to filter the login activity by country and/or user.
  • Failed Logins.
    • Failed logins shown from external and from internal IP addresses, over time and by user.
  • File, Folder and User Audit.
    • Complete file and folder audit trail providing answers to questions such as “what file operations did user X perform when?” or “who did what to file Y when?” or "when did user X do something to file Y?
  • Virus Detection.
    • Statistics and information from the “Anti-virus for files” app for Nextcloud.
2

that sounds quite good.

but why don’t you release it at official app-shop?

3

A slight misunderstanding, the app is for the Splunk platform, but monitors the Nextcloud platform, hence it is accessible from the Splunk App Store.

4

Sample dashboard screenshots

01-Overview%2C%20Available
01-Overview, Available.jpg1236Ă—1107 119 KB

02-Overview%2C%20Maintenance
02-Overview, Maintenance.jpg1236Ă—1107 118 KB

03-Overview%2C%20Web%20server%20down
03-Overview, Web server down.jpg1236Ă—1107 123 KB

04-File%20and%20Folder%20Activity
04-File and Folder Activity.jpg1236Ă—1131 187 KB

05-Users
05-Users.jpg1236Ă—871 92.2 KB
06-User%2C%20Group%20Operations
06-User, Group Operations.jpg1236Ă—1380 141 KB
07-Shares%20and%20Storage
07-Shares and Storage.jpg1236Ă—1246 157 KB
08-Sharing%20Actions
08-Sharing Actions.jpg1236Ă—425 98.4 KB
09-Failed%20Logins
09-Failed Logins.jpg1236Ă—926 156 KB
10-Password%20Changes
10-Password Changes.jpg1236Ă—1089 134 KB
11-Public%20File%20Access
11-Public File Access.jpg1236Ă—1378 222 KB
12-File%2C%20Folder%20and%20User%20Audit
12-File, Folder and User Audit.jpg1280Ă—1084 236 KB
13-Hardware
13-Hardware.jpg1236Ă—802 122 KB

5

:man_facepalming: - my bad. :man_facepalming:

6

:sunglasses:

7

Hi there Rickenbacker.
I just created a new instance V23 and the failed log ins are not displaying ? Has Nextcloud moved the log or do the dashboard queries need updating ? All other dashboards are lighting up and I have added the path to audit.log and nextcloud.log.

Thanks in advance.

8

Any news on that??