How to schedule a daily report of logins over time?

Path Finder

I want to report the number of logins on my system by day. Is there some way to schedule the 24 hour search every day and show a chart of the daily counts so far? I am thinking this is more efficient than searching the daily count over the history of the index.

0 Karma


Have you considered the in July 2016 released Monitoring Splunk Users and Knowledge Objects App ?
It has a nice view with lots of statistics and also a graph of daily users logging in. Turning the search into a weekly (mail) report might be an idea; or implementing the panel into dashboards.

0 Karma

Revered Legend
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!