Security

How to search for users that have reset password and then shortly logged off?

Hapticz
New Member

I'm looking to create a search for users that have reset their password and then within a certain amount of time logged off. 

 

Anybody know the best way of producing a search for this?

 

Much appreciated for any help with his. 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...