We're using ldap authentication. How to get a list of users and their email addresses from Splunk?
Try: | rest /services/authentication/users splunk_server=local | table realname, email
| rest /services/authentication/users splunk_server=local | table realname, email
View solution in original post