SPL
Show Splunk User to Role mapping
Description
The following Splunk REST query shows all roles, number of capabilities, and landing app for each user.
2 1
| rest /services/authentication/users | eval name=coalesce(realname, title) | stats values(roles) as Role first(defaultApp) as "Landing App" count(capabilities) as "Number of Capabilities" by name
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.