SPL
Splunk Query to report on users logging on to the Splunk Web Console
Description
9 1
index=_audit tag=authentication info=succeeded |dedup user | table user timestamp
SPL
index=_audit tag=authentication info=succeeded |dedup user | table user timestamp
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.