Splunk Enterprise Security

Splunk SE | find out from user ID from what machines did they log in from ?

New Member

Hi all , i am fairly new to splunk and gennrelly in splunk SE as well , i am in dispreate need of your help if you may

i would like to know using user ID on what machines it was used to log in from ? because we have a user that keeps being logged out from thier machine

thank you in advance

0 Karma


hi @kabar - you have to elaborate a bit more. sample events showing log in /log off..something of that sort

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...