Hi all , i am fairly new to splunk and gennrelly in splunk SE as well , i am in dispreate need of your help if you may
i would like to know using user ID on what machines it was used to log in from ? because we have a user that keeps being logged out from thier machine
thank you in advance
hi @kabar - you have to elaborate a bit more. sample events showing log in /log off..something of that sort