topic Re: What search syntax to search for VPN log history of specific user? in Security https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79064#M2615 <PRE><CODE>search index=yourvpnindex sourcetype=yourvpnsourcetype "*yourspecificuser*" </CODE></PRE> <P>More information about what you want out of the search would be helpful.</P> <P>General rules for an efficient search are to be as specific as possible with the search.</P> Tue, 01 Oct 2013 22:36:01 GMT lukejadamec 2013-10-01T22:36:01Z What search syntax to search for VPN log history of specific user? https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79063#M2614 <P>What search syntax to search for VPN log history of specific user?</P> Tue, 01 Oct 2013 22:10:42 GMT https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79063#M2614 rhazzaguilar 2013-10-01T22:10:42Z Re: What search syntax to search for VPN log history of specific user? https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79064#M2615 <PRE><CODE>search index=yourvpnindex sourcetype=yourvpnsourcetype "*yourspecificuser*" </CODE></PRE> <P>More information about what you want out of the search would be helpful.</P> <P>General rules for an efficient search are to be as specific as possible with the search.</P> Tue, 01 Oct 2013 22:36:01 GMT https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79064#M2615 lukejadamec 2013-10-01T22:36:01Z Re: What search syntax to search for VPN log history of specific user? https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79065#M2616 <P>if I am using Cisco Anyconnect, what will be my vpnindex and vpnsourcetype?</P> Tue, 01 Oct 2013 23:09:47 GMT https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79065#M2616 rhazzaguilar 2013-10-01T23:09:47Z Re: What search syntax to search for VPN log history of specific user? https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79066#M2617 <P>Can you run a search in the Search App that shows the logs you're interested in?<BR /><BR /> If so, then do so. Look to the left. The source, sourcetype, and index will be listed. To find the index you might have to scroll to the bottom and select View All.<BR /> Post back what you find along with a pretend user name.</P> Tue, 01 Oct 2013 23:40:18 GMT https://community.splunk.com/t5/Security/What-search-syntax-to-search-for-VPN-log-history-of-specific/m-p/79066#M2617 lukejadamec 2013-10-01T23:40:18Z