Dashboards & Visualizations

How to have a current VPN connections in dashboard

newill
New Member

Good afternoon Splunkers,

I'm working on a dashboard that shows a chart of existing VPN connections at a given time. I have one that shows new connections and the logs show when a connection is created and when it is disconnected, but how can I show an hourly view of existing connections.

For example, If I have 3 users connect during the day, user A is active from 6am - 3 pm, B is active 8 am - 5 pm and C is active from 9 am - 6pm.

How can I have a timechart that shows 6 am 1 user connected, 7 am 1 user connected, 8 am 2 users connected, 9 am 3 users connected ... 4 pm 2 users connected 5 pm 1 user connected???

0 Karma

to4kawa
Ultra Champion

Do you have sample logs?

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...