List of Users in a Linux Environment linux_secure SplunkNinja Vote Up +3 Vote Down -0You already voted! The following splunk query will ouput a list of user accounts appearing in linux_secure audit logs: sourcetype=linux_secure | rex “\suser[^’](?<User>\S+\w+)” | stats count by User Continue Reading →
