All Apps and Add-ons

One user logging into multiple systems at or around the same time - Cisco ISE

TitanAE
New Member

Writing a Splunk report that looks for multiple users logged into the same machine at or around the same time frame. I can’t think of an ISE value that would indicate a user (such as myself) logging into a machine that you’d potentially be working on. Hoping to get some advice on how to approach this.

0 Karma

pruthvikrishnap
Contributor

Hi, In Cisco ISE message catlog, there is a field for xx:xx:xx:xx/host_name which can be used to correlate this information.

0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...