SPL
Count of Unique Users in a Linux Environment
Description
This splunk query will return the total number of unique users in a given time range.
1 0
sourcetype=linux_secure | rex "\suser[^'](?<User>\S+\w+)" | stats dc(User)
GoSplunk SPL + dashboard repository
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.