https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121888#M25252 <P>Thanks that worked <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> </P> Thu, 29 Jan 2015 13:22:58 GMT joeyfine 2015-01-29T13:22:58Z https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121886#M25250 <P>Hello all,</P> <P>I am creating a report that shows that shows when external facing ips log into our server. I have the user name, IP address, City, Region, &amp; Country all reporting. I am trying to get a time stamp when the users log in but i cannot find the right command can you help? Here is what I have so far..</P> <P>sourcetype="iis" source="E:\TempSplunkData\IIS\u_ex15012812.log" c_ip != "10.47.*" | iplocation c_ip | table c_ip, cs_username, City, Region, Country</P> Mon, 28 Sep 2020 18:47:53 GMT https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121886#M25250 joeyfine 2020-09-28T18:47:53Z https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121887#M25251 <PRE><CODE>... | table _time c_ip, cs_username, City, Region, Country </CODE></PRE> Thu, 29 Jan 2015 13:09:42 GMT https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121887#M25251 richgalloway 2015-01-29T13:09:42Z https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121888#M25252 <P>Thanks that worked <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> </P> Thu, 29 Jan 2015 13:22:58 GMT https://community.splunk.com/t5/Getting-Data-In/log-on-times-for-report/m-p/121888#M25252 joeyfine 2015-01-29T13:22:58Z