<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: concurrent usage by user in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/542203#M8812</link>
    <description>&lt;P&gt;Due to some family health issues, I had to step back from this thread for a couple of weeks.&amp;nbsp; Does anybody have any suggestions that I could add to help get some assistance with my question?&amp;nbsp; TIA&lt;/P&gt;</description>
    <pubDate>Wed, 03 Mar 2021 16:27:56 GMT</pubDate>
    <dc:creator>MwayneSmith</dc:creator>
    <dc:date>2021-03-03T16:27:56Z</dc:date>
    <item>
      <title>concurrent usage by user</title>
      <link>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/539314#M8754</link>
      <description>&lt;P&gt;We have a search that is monitoring and reporting website usage by users over time.&amp;nbsp; Our customer base is 4K+,&amp;nbsp; most are mobile users so IP changes frequently.&amp;nbsp; Monthly activity would generate approximately 10K+ transactions with pertinent data points being:&lt;/P&gt;&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; email&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;IP address&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Session Start&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Session Stop&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; Duration(mins)&amp;nbsp; &amp;nbsp; &amp;nbsp;Actions&lt;/P&gt;&lt;P&gt;&lt;A href="mailto:cxxx@yyy.com" target="_blank"&gt;cxxx@yyy.com&lt;/A&gt; 192.168.1.3&amp;nbsp; &amp;nbsp; 2021/01/28 10:30:43&amp;nbsp; &amp;nbsp; &amp;nbsp;2021/01/28 10:34:32&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;3.82&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 18&lt;/P&gt;&lt;P&gt;We would like to automate the process to identify email and IP transactions that are concurrent; i.e. same user different IP's,&amp;nbsp; running at the same time.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any suggestions?&lt;/P&gt;</description>
      <pubDate>Wed, 10 Feb 2021 15:34:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/539314#M8754</guid>
      <dc:creator>MwayneSmith</dc:creator>
      <dc:date>2021-02-10T15:34:21Z</dc:date>
    </item>
    <item>
      <title>Re: concurrent usage by user</title>
      <link>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/540405#M8775</link>
      <description>&lt;P&gt;Okay, I must have done something wrong with my original question (fairly new at this).&amp;nbsp; Have I posted this in the wrong category, not provided enough description?&amp;nbsp; All suggestions appreciated.&lt;/P&gt;</description>
      <pubDate>Thu, 18 Feb 2021 15:22:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/540405#M8775</guid>
      <dc:creator>MwayneSmith</dc:creator>
      <dc:date>2021-02-18T15:22:55Z</dc:date>
    </item>
    <item>
      <title>Re: concurrent usage by user</title>
      <link>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/540409#M8776</link>
      <description>&lt;P&gt;Can you post some sample data with scrambled user and ip information? That helps us to help you.&lt;/P&gt;</description>
      <pubDate>Thu, 18 Feb 2021 15:51:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/540409#M8776</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2021-02-18T15:51:36Z</dc:date>
    </item>
    <item>
      <title>Re: concurrent usage by user</title>
      <link>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/540437#M8777</link>
      <description>&lt;P&gt;Thanks,&amp;nbsp; Will this work?&amp;nbsp; Could not load a CSV file type.&amp;nbsp; We're looking for any overlap on unique email, unique IP between these Site Times.&lt;/P&gt;&lt;P&gt;In this example we would like to publish that &lt;A href="mailto:User1@testemail" target="_blank"&gt;User1@testemail&lt;/A&gt;&amp;nbsp;with two different IPs were active in same timeframes (&lt;STRONG&gt;bolded transactions&lt;/STRONG&gt;).&amp;nbsp; Make sense?&amp;nbsp; And we can, of course, sort by any of these fields prior.&amp;nbsp; We would normally have 10k+ emails and 40K+ transactions like those below.&lt;/P&gt;&lt;P&gt;email,User IP,First Site Activity,Last Site Activity&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/01/25 09:14:53,2021/01/25 09:25:06&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/01/25 09:25:34,2021/01/25 09:33:49&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/01/25 09:26:21,2021/01/25 09:28:21&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/01/25 13:45:23,2021/01/25 13:52:22&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/01/25 13:58:03,2021/01/25 14:23:13&lt;BR /&gt;&lt;STRONG&gt;User1@testemail.com,717.228.44.170,2021/01/25 16:24:45,2021/01/25 17:35:22&lt;/STRONG&gt;&lt;BR /&gt;&lt;STRONG&gt;User1@testemail.com,555.184.249.118,2021/01/25 17:10:12,2021/01/25 17:22:31&lt;/STRONG&gt;&lt;BR /&gt;User1@testemail.com,444.90.63.75,2021/01/27 10:34:48,2021/01/27 10:37:41&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/27 14:04:31,2021/01/27 14:22:38&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/27 14:18:05,2021/01/27 16:35:43&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/27 16:17:44,2021/01/27 16:50:49&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/27 16:26:23,2021/01/27 16:48:36&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/27 16:28:26,2021/01/27 16:45:11&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/27 16:30:36,2021/01/27 17:20:35&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/28 09:39:57,2021/01/28 10:00:15&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/28 09:54:05,2021/01/28 10:13:46&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/28 11:35:41,2021/01/28 11:53:43&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/28 11:53:50,2021/01/28 11:59:06&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/01/28 12:00:24,2021/01/28 12:02:12&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/02/04 08:30:36,2021/02/04 09:02:10&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/02/04 11:16:49,2021/02/04 11:49:49&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/02/04 11:56:58,2021/02/04 12:48:00&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/02/04 12:30:09,2021/02/04 13:21:55&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/02/05 15:56:35,2021/02/05 16:01:35&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/02/08 08:18:28,2021/02/08 08:20:56&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/02/08 12:57:18,2021/02/08 13:08:34&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/02/08 13:12:08,2021/02/08 14:19:09&lt;BR /&gt;User1@testemail.com,717.228.44.170,2021/02/12 14:11:24,2021/02/12 14:31:29&lt;BR /&gt;User1@testemail.com,555.184.249.118,2021/02/16 08:40:27,2021/02/16 09:36:19&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/20 15:44:40,2021/01/20 16:09:33&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/25 08:56:15,2021/01/25 09:23:01&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/25 10:10:40,2021/01/25 10:37:18&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/25 10:38:50,2021/01/25 10:51:17&lt;BR /&gt;User2@testemail.com,666.232.176.10,2021/01/26 09:48:37,2021/01/26 10:52:00&lt;BR /&gt;User2@testemail.com,666.232.176.10,2021/01/26 11:48:07,2021/01/26 12:02:41&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/26 13:52:19,2021/01/26 14:23:16&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/26 14:14:01,2021/01/26 15:38:30&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:11:06,2021/01/29 09:40:21&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:21:02,2021/01/29 09:35:14&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:27:04,2021/01/29 09:57:56&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:45:38,2021/01/29 09:55:14&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:50:21,2021/01/29 10:02:58&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:54:39,2021/01/29 10:04:21&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 09:59:02,2021/01/29 10:04:37&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 10:02:56,2021/01/29 10:09:54&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 10:06:50,2021/01/29 10:31:05&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 10:16:29,2021/01/29 10:28:12&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 10:19:51,2021/01/29 10:27:28&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 13:25:34,2021/01/29 13:45:43&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/01/29 13:45:45,2021/01/29 14:35:22&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/02/03 10:31:35,2021/02/03 10:37:27&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/02/03 10:52:50,2021/02/03 10:54:57&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/02/03 11:32:41,2021/02/03 11:34:16&lt;BR /&gt;User2@testemail.com,222.24.204.8,2021/02/03 11:39:17,2021/02/03 11:46:18&lt;/P&gt;</description>
      <pubDate>Thu, 18 Feb 2021 20:27:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/540437#M8777</guid>
      <dc:creator>MwayneSmith</dc:creator>
      <dc:date>2021-02-18T20:27:22Z</dc:date>
    </item>
    <item>
      <title>Re: concurrent usage by user</title>
      <link>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/542203#M8812</link>
      <description>&lt;P&gt;Due to some family health issues, I had to step back from this thread for a couple of weeks.&amp;nbsp; Does anybody have any suggestions that I could add to help get some assistance with my question?&amp;nbsp; TIA&lt;/P&gt;</description>
      <pubDate>Wed, 03 Mar 2021 16:27:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/concurrent-usage-by-user/m-p/542203#M8812</guid>
      <dc:creator>MwayneSmith</dc:creator>
      <dc:date>2021-03-03T16:27:56Z</dc:date>
    </item>
  </channel>
</rss>

