Splunk AppDynamics

User Activity Report

Clint_Durham
New Member

Is there a way to pull a report of all the users for my controller and when was the last time that they logged in?

I know i can pull a controller report and seen recent logins, but i would like to see last activity for ALL users on my controller.

Labels (3)
0 Karma

Philip_Rogers
Path Finder

Hi Clint-

The "Controller Audit" report type is best suited for this purpose. You can choose default time ranges up to the past year or set a custom time range for the report. This report will contain all "LOGIN" and "LOGOUT" events by Username and Date/Time (as well as all other controller activity, unless filtered out).

image.png

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...