https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521005#M146773 <P>OK so what data do you already have in splunk?</P> Wed, 23 Sep 2020 09:39:39 GMT ITWhisperer 2020-09-23T09:39:39Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/520993#M146765 <P>Hi Community,</P><P>I Need to find the login hours of the user/employee. Did we see those results in splunk...? Please help me out on this.</P><P>Thanks...</P> Wed, 23 Sep 2020 08:36:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/520993#M146765 mputtam 2020-09-23T08:36:54Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/520997#M146767 <P>Logged into where? What data do you have in splunk to help you determine this?</P> Wed, 23 Sep 2020 08:58:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/520997#M146767 ITWhisperer 2020-09-23T08:58:46Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/520999#M146768 <P>Hi,</P><P>I believe that Logged in to applications or hosts will be helpful.&nbsp; If you have any other views that would be helpful to short it out this issue.</P><P>&nbsp;</P><P>Thanks...</P> Wed, 23 Sep 2020 09:19:47 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/520999#M146768 mputtam 2020-09-23T09:19:47Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521005#M146773 <P>OK so what data do you already have in splunk?</P> Wed, 23 Sep 2020 09:39:39 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521005#M146773 ITWhisperer 2020-09-23T09:39:39Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521011#M146777 <P>I had written " index=* &lt;user email address&gt; " in the search head which is not useful to me. help me out is there any other way to find the logs.</P><P>one of our employee is going to be terminated so we need to monitor the user login hours.</P> Wed, 23 Sep 2020 10:10:47 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521011#M146777 mputtam 2020-09-23T10:10:47Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521022#M146783 <P>I am afraid I can't help you unless you explain what data you have in splunk. Imagine I asked you to find all the mentions of the name John on my bookshelf. How would you do that? Oh and I also want you to check all the books I have stacked on the floor, but you could only look at them if I put them on the shelf?</P> Wed, 23 Sep 2020 10:49:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521022#M146783 ITWhisperer 2020-09-23T10:49:23Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521023#M146784 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/224187">@mputtam</a>&nbsp;You have to provide us few more detailed information.. which application your employee's use to login? are those app login details/logs are ingested into splunk?&nbsp;</P><P>index=&lt;employee email id&gt; --- is generally a wrong process.&nbsp;</P><P>&nbsp;</P><P>index=login-app employee=emp-mail-id (or emp=emp-id or something...) is the right method.&nbsp;</P><P>&nbsp;</P><P>(i have given around 300 karma points so far received badge for that,.. maybe you also give karma points if a post helped you, thx)</P> Wed, 23 Sep 2020 10:56:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-logging-hours-report-of-the-employee-in-splunk/m-p/521023#M146784 inventsekar 2020-09-23T10:56:12Z