https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176543#M35402 <P>Thanks, but not quite what I am looking for... I am looking more for a way to capture the amount of logins per day, or web user load...</P> Thu, 12 Dec 2013 18:56:17 GMT fisuser1 2013-12-12T18:56:17Z https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176541#M35400 <P>Is there a way to view active, daily "log in" web sessions for a managed site? Would need to create this search and save it as a dashboard... I am already capturing the Apache access log from this site in Splunk and want to see daily successful login metrics.</P> Thu, 12 Dec 2013 14:55:03 GMT https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176541#M35400 fisuser1 2013-12-12T14:55:03Z https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176542#M35401 <P>You can try this. It extracts user names for sessions out of my access_combined logs.</P> <PRE><CODE>sourcetype=access_combined "*usernameAttr*" | rex ".*usernameAttr:(?&lt;SessionUserName&gt;\S+)\s.*" |stats count by SessionUserName </CODE></PRE> <P>Run for whatever timeframe you like.</P> Thu, 12 Dec 2013 16:47:05 GMT https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176542#M35401 lukejadamec 2013-12-12T16:47:05Z https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176543#M35402 <P>Thanks, but not quite what I am looking for... I am looking more for a way to capture the amount of logins per day, or web user load...</P> Thu, 12 Dec 2013 18:56:17 GMT https://community.splunk.com/t5/Getting-Data-In/View-Active-Web-Sessions-in-Splunk/m-p/176543#M35402 fisuser1 2013-12-12T18:56:17Z