___ # Tags #wazuh #homelab #splunk-queries # Helpful Docs # Notes ##### Linux Successful Logins ```txt index IN (so-wazuh) rule.description IN ("sshd: authentication success.") ``` ##### Windows Successful Logins ```txt index IN (so-wazuh) rule.description IN ("Windows Workstation Logon Success") ```