https://community.splunk.com/t5/Security/report-users-activities/m-p/37211#M1250 <P>These 2 searches cover it:</P> <PRE><CODE>| rest /services/authentication/users | rest /services/authorization/roles </CODE></PRE> Tue, 30 Jun 2015 04:24:26 GMT woodcock 2015-06-30T04:24:26Z https://community.splunk.com/t5/Security/report-users-activities/m-p/37210#M1249 <P>Is there a search that i can see the list of user login, role, and index?<BR /> thanks,</P> Mon, 19 Dec 2011 16:58:57 GMT https://community.splunk.com/t5/Security/report-users-activities/m-p/37210#M1249 duongl2 2011-12-19T16:58:57Z https://community.splunk.com/t5/Security/report-users-activities/m-p/37211#M1250 <P>These 2 searches cover it:</P> <PRE><CODE>| rest /services/authentication/users | rest /services/authorization/roles </CODE></PRE> Tue, 30 Jun 2015 04:24:26 GMT https://community.splunk.com/t5/Security/report-users-activities/m-p/37211#M1250 woodcock 2015-06-30T04:24:26Z https://community.splunk.com/t5/Security/report-users-activities/m-p/37212#M1251 <P>hi <BR /> try this</P> <PRE><CODE>| rest /services/authentication/current-context/context | table username roles </CODE></PRE> Tue, 16 Feb 2016 11:56:32 GMT https://community.splunk.com/t5/Security/report-users-activities/m-p/37212#M1251 chimell 2016-02-16T11:56:32Z