https://community.splunk.com/t5/Splunk-Search/User-with-name-per-most-used-application/m-p/504970#M141035 <P>Hi,</P><P>If you want to list which users are using each application, maybe the "| stats values()" can be useful:</P><P>&nbsp;</P><LI-CODE lang="markup">... | stats values(username) by application</LI-CODE><P>&nbsp;</P><P>Also, if you don't mind, you can share any query you have already tried so I can help you to to include the stats command.</P><P>&nbsp;</P> Thu, 18 Jun 2020 13:01:10 GMT alonsocaio 2020-06-18T13:01:10Z https://community.splunk.com/t5/Splunk-Search/User-with-name-per-most-used-application/m-p/504968#M141034 <P>I want to run a query on a server to display all users with their names per application. It is about finding out which users need which program most on a particular server. However, I have no idea how I could write such a script. Can someone help me, please!</P> Thu, 18 Jun 2020 12:41:42 GMT https://community.splunk.com/t5/Splunk-Search/User-with-name-per-most-used-application/m-p/504968#M141034 Gib10920 2020-06-18T12:41:42Z https://community.splunk.com/t5/Splunk-Search/User-with-name-per-most-used-application/m-p/504970#M141035 <P>Hi,</P><P>If you want to list which users are using each application, maybe the "| stats values()" can be useful:</P><P>&nbsp;</P><LI-CODE lang="markup">... | stats values(username) by application</LI-CODE><P>&nbsp;</P><P>Also, if you don't mind, you can share any query you have already tried so I can help you to to include the stats command.</P><P>&nbsp;</P> Thu, 18 Jun 2020 13:01:10 GMT https://community.splunk.com/t5/Splunk-Search/User-with-name-per-most-used-application/m-p/504970#M141035 alonsocaio 2020-06-18T13:01:10Z