Weekend User Activity WinEventLog:Security SplunkNinja 7 Comments Vote Up +1 Vote Down -3You already voted! Run the following (modify user field as needed) to show weekend activity: sourcetype=”WinEventLog:Security” (date_wday=saturday OR date_wday=sunday) | stats count by Account_Name, date_wday Continue Reading →
