https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544240#M154163 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/223770">@splunkcol</a>,<BR />The below query give top users who successfully logged into Splunk in the last 1 year.</P><LI-CODE lang="markup">index=_audit sourcetype=audittrail action="login attempt" info=succeeded earliest=-1y | top user</LI-CODE> Wed, 17 Mar 2021 16:46:20 GMT manjunathmeti 2021-03-17T16:46:20Z https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544234#M154159 <P>&nbsp;</P><P>&nbsp;</P><P>I need to get a top 10 of the users who use Splunk the most</P> Wed, 17 Mar 2021 16:33:25 GMT https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544234#M154159 splunkcol 2021-03-17T16:33:25Z https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544240#M154163 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/223770">@splunkcol</a>,<BR />The below query give top users who successfully logged into Splunk in the last 1 year.</P><LI-CODE lang="markup">index=_audit sourcetype=audittrail action="login attempt" info=succeeded earliest=-1y | top user</LI-CODE> Wed, 17 Mar 2021 16:46:20 GMT https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544240#M154163 manjunathmeti 2021-03-17T16:46:20Z https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544241#M154164 <P>Top 10 by what measure?&nbsp; What problem are you trying to solve?</P> Wed, 17 Mar 2021 16:47:57 GMT https://community.splunk.com/t5/Splunk-Search/Top-10-Splunk-Users/m-p/544241#M154164 richgalloway 2021-03-17T16:47:57Z