https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493681#M84335 <P>use <CODE>timechart</CODE></P> Mon, 11 May 2020 21:59:14 GMT to4kawa 2020-05-11T21:59:14Z https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493680#M84334 <P>Hi everyone,</P> <P>Can someone please help with a search I'm trying to create. My end goal is to capture which user account logged into the server and have a time associated with their login. </P> <P>My search so far is below. This only gives me the count of how many times the users logged in for the past "x" days.</P> <PRE><CODE> index="wineventlog" host="Redacted" source="XmlWinEventLog:Security" | stats count by SubjectUserSid </CODE></PRE> Mon, 11 May 2020 21:43:12 GMT https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493680#M84334 mysicksi 2020-05-11T21:43:12Z https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493681#M84335 <P>use <CODE>timechart</CODE></P> Mon, 11 May 2020 21:59:14 GMT https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493681#M84335 to4kawa 2020-05-11T21:59:14Z https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493682#M84336 <P>Thank you. </P> Tue, 12 May 2020 12:54:41 GMT https://community.splunk.com/t5/Getting-Data-In/Sort-results-by-time-events/m-p/493682#M84336 mysicksi 2020-05-12T12:54:41Z