Show all currently logged in users

Use this Splunk rest query to list all currently logged in users (to your Splunk server).

 

| rest /services/authentication/current-context | search NOT username=”splunk-system-user” | table username roles updated

 

Share This:
Tagged:

Leave A Comment?