-
1 year, 6 months ago
gr33nlant3rn commented on the post, Dashboard and App views by user
In reply to: john117 wrote a new post, Dashboard and App views by user This Splunk query / search shows historical access to dashboards and apps on a local splunk server. index=_internal sourcetype=splunk_web_access host=* […] ViewThis is GREAT!
Is there a way to map the user to their email or name? Would that require another join of some sort?
I looked into the base search and didn’t see an email or name field.
-
2 years, 5 months ago
gr33nlant3rn commented on the post, Show all currently logged in users
In reply to: ItsJohnLocke wrote a new post, Show all currently logged in users Use this Splunk rest query to list all currently logged in users (to your Splunk server). | rest /services/authentication/current-context | […] ViewI am not sure what updated is supposed to do… but, it looked like something close to epoc time? Anyway, I cut it off and the query looked cleaner?
-
3 years ago
gr33nlant3rn became a registered member
-
3 years ago
gr33nlant3rn became a registered member
