Dashboards & Visualizations

How to have a current VPN connections in dashboard

newill
New Member

Good afternoon Splunkers,

I'm working on a dashboard that shows a chart of existing VPN connections at a given time. I have one that shows new connections and the logs show when a connection is created and when it is disconnected, but how can I show an hourly view of existing connections.

For example, If I have 3 users connect during the day, user A is active from 6am - 3 pm, B is active 8 am - 5 pm and C is active from 9 am - 6pm.

How can I have a timechart that shows 6 am 1 user connected, 7 am 1 user connected, 8 am 2 users connected, 9 am 3 users connected ... 4 pm 2 users connected 5 pm 1 user connected???

0 Karma

to4kawa
Ultra Champion

Do you have sample logs?

0 Karma
Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...