<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Email report on Splunk Users in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43605#M10251</link>
    <description>&lt;P&gt;seems we can use the brand new command | rest to access the information !!!&lt;/P&gt;</description>
    <pubDate>Wed, 30 May 2012 15:27:31 GMT</pubDate>
    <dc:creator>ma_anand1984</dc:creator>
    <dc:date>2012-05-30T15:27:31Z</dc:date>
    <item>
      <title>Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43602#M10248</link>
      <description>&lt;P&gt;I would like to create an email report with following details that runs every day&lt;/P&gt;

&lt;P&gt;All admin users&lt;BR /&gt;
All power users&lt;BR /&gt;
User role - users count&lt;/P&gt;</description>
      <pubDate>Fri, 04 May 2012 14:24:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43602#M10248</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2012-05-04T14:24:52Z</dc:date>
    </item>
    <item>
      <title>Re: Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43603#M10249</link>
      <description>&lt;P&gt;any help please&lt;/P&gt;</description>
      <pubDate>Wed, 16 May 2012 11:40:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43603#M10249</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2012-05-16T11:40:55Z</dc:date>
    </item>
    <item>
      <title>Re: Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43604#M10250</link>
      <description>&lt;P&gt;There are no search commands that return this, so you'd have to write your own that gets that kind of info from the Splunk REST API endpoint and returns it.&lt;/P&gt;</description>
      <pubDate>Wed, 16 May 2012 11:54:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43604#M10250</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2012-05-16T11:54:24Z</dc:date>
    </item>
    <item>
      <title>Re: Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43605#M10251</link>
      <description>&lt;P&gt;seems we can use the brand new command | rest to access the information !!!&lt;/P&gt;</description>
      <pubDate>Wed, 30 May 2012 15:27:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43605#M10251</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2012-05-30T15:27:31Z</dc:date>
    </item>
    <item>
      <title>Re: Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43606#M10252</link>
      <description>&lt;P&gt;Hi Ma_anand1984,&lt;BR /&gt;
would you share with what you ended up using?&lt;/P&gt;</description>
      <pubDate>Fri, 22 Mar 2013 19:23:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43606#M10252</guid>
      <dc:creator>cboeing</dc:creator>
      <dc:date>2013-03-22T19:23:48Z</dc:date>
    </item>
    <item>
      <title>Re: Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43607#M10253</link>
      <description>&lt;P&gt;@cboeing &lt;/P&gt;

&lt;P&gt;try this&lt;/P&gt;

&lt;P&gt;| rest splunk_server=local /servicesNS/-/-/authentication/users count=0 | table title email realname roles type&lt;/P&gt;</description>
      <pubDate>Mon, 25 Mar 2013 09:41:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43607#M10253</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2013-03-25T09:41:03Z</dc:date>
    </item>
    <item>
      <title>Re: Email report on Splunk Users</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43608#M10254</link>
      <description>&lt;P&gt;This is great!!&lt;/P&gt;</description>
      <pubDate>Mon, 15 Dec 2014 20:51:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Email-report-on-Splunk-Users/m-p/43608#M10254</guid>
      <dc:creator>LiquidTension</dc:creator>
      <dc:date>2014-12-15T20:51:50Z</dc:date>
    </item>
  </channel>
</rss>

