https://community.splunk.com/t5/Splunk-Search/Need-to-create-a-ASA-VPN-user-report/m-p/79924#M181783 <P>This is a great tutorial:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial">http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial</A></P> <P>You can also download a copy of this free book:<BR /> <A href="http://www.splunk.com/goto/book">http://www.splunk.com/goto/book</A></P> <P>Here is more info about the Interactive Field Extractor (IFX):<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Knowledge/ExtractfieldsinteractivelywithIFX">http://docs.splunk.com/Documentation/Splunk/6.0.1/Knowledge/ExtractfieldsinteractivelywithIFX</A></P> Sat, 04 Jan 2014 21:57:36 GMT Adrian 2014-01-04T21:57:36Z https://community.splunk.com/t5/Splunk-Search/Need-to-create-a-ASA-VPN-user-report/m-p/79923#M181782 <P>Hi all -</P> <P>I've sort of gotten myself into a bind here.... One of my clients was looking for a way to report on VPN usage, with as little cost to them as possible. I discovered Splunk's free license with the Cisco Security Suite / Firewall app and love the information it is giving me, but I am the most <EM>basic</EM> of users (i've figured out how to add the "UserID" field, click on it, and see pages of SYSLOG data showing me what users connected/disconneted, I've even learned that if I type "%ASA-5-713259" into the search bar, I can see all of my VPN disconnects - COOL!) Now, for my problem... I need to get that information into a printable report with headings and detail.. and I've got know idea how to do it... This whole world of "rex's" and "field extractions" and "events" has me overwhelmed... is there any sort of tutorial on how to do this.. please forgive my ignorance...</P> Thu, 22 Sep 2011 15:22:03 GMT https://community.splunk.com/t5/Splunk-Search/Need-to-create-a-ASA-VPN-user-report/m-p/79923#M181782 dgodfrey 2011-09-22T15:22:03Z https://community.splunk.com/t5/Splunk-Search/Need-to-create-a-ASA-VPN-user-report/m-p/79924#M181783 <P>This is a great tutorial:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial">http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial</A></P> <P>You can also download a copy of this free book:<BR /> <A href="http://www.splunk.com/goto/book">http://www.splunk.com/goto/book</A></P> <P>Here is more info about the Interactive Field Extractor (IFX):<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Knowledge/ExtractfieldsinteractivelywithIFX">http://docs.splunk.com/Documentation/Splunk/6.0.1/Knowledge/ExtractfieldsinteractivelywithIFX</A></P> Sat, 04 Jan 2014 21:57:36 GMT https://community.splunk.com/t5/Splunk-Search/Need-to-create-a-ASA-VPN-user-report/m-p/79924#M181783 Adrian 2014-01-04T21:57:36Z