3 Correlation Searches stating that previously_seen_users_console_logins.csv isn't populated:
The trimmed down & redacted contents of previously_seen_users_console_logins.csv are:
identity,
arn:aws:sts::[account-id]:[assumed-role]/[role-name]/[role-session-name],
I can't find any documentation on how to properly populate this lookup. Any assistance would be greatly appreciated