Splunk AppDynamics

User Activity Report

Clint_Durham
New Member

Is there a way to pull a report of all the users for my controller and when was the last time that they logged in?

I know i can pull a controller report and seen recent logins, but i would like to see last activity for ALL users on my controller.

Labels (3)
0 Karma

Philip_Rogers
Path Finder

Hi Clint-

The "Controller Audit" report type is best suited for this purpose. You can choose default time ranges up to the past year or set a custom time range for the report. This report will contain all "LOGIN" and "LOGOUT" events by Username and Date/Time (as well as all other controller activity, unless filtered out).

image.png

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...

Meet Splunk Observability Studio: AI-Assisted OpenTelemetry Instrumentation Without ...

Instrumentation is usually the last step or even an afterthought when building out a project. The feature ...

Federated Search for Cisco Security and Analytics Logging (SAL) is now GA on Splunk ...

Federated Search for Cisco  Security Analytics and Logging (SAL) is now generally available as part of the ...