https://community.splunk.com/t5/Security/Search-user-by-IP/m-p/379550#M9337 <P>Hi kuki_junior,</P> <P>try this:</P> <PRE><CODE>your base search here | stats count values(user) AS user by IP </CODE></PRE> <P>Hope this helps ...</P> <P>cheers, MuS</P> Mon, 25 Mar 2019 21:45:51 GMT MuS 2019-03-25T21:45:51Z https://community.splunk.com/t5/Security/Search-user-by-IP/m-p/379549#M9336 <P>Can I check how to search a user by IP addresss? I would like to create a table to list out all the users. </P> Mon, 25 Mar 2019 17:17:17 GMT https://community.splunk.com/t5/Security/Search-user-by-IP/m-p/379549#M9336 kuki_junior 2019-03-25T17:17:17Z https://community.splunk.com/t5/Security/Search-user-by-IP/m-p/379550#M9337 <P>Hi kuki_junior,</P> <P>try this:</P> <PRE><CODE>your base search here | stats count values(user) AS user by IP </CODE></PRE> <P>Hope this helps ...</P> <P>cheers, MuS</P> Mon, 25 Mar 2019 21:45:51 GMT https://community.splunk.com/t5/Security/Search-user-by-IP/m-p/379550#M9337 MuS 2019-03-25T21:45:51Z