17.2 Viewing Raw Secure Configuration Manager Events in Splunk

To view the raw syslog events, select Search & Reporting then look for Secure Configuration Manager.