List of Login Attempts to Splunk audittrail CattyWampus 3 5 This will return a list of users who attempted to login to the splunk searchhead. It will list both successful attempts and failed attempts. index=_audit tag=authentication | stats count by user, info | sort - info 1 index=_audit tag=authentication | stats count by user, info | sort - info Continue Reading →