Splunk Search

AD User logon/Destination host report

fgottilu
New Member

Hello Community,

I am new in splunk.
I want to make a report with all AD User logon with the details the source and the destination host.
I want to have the possibility to have a daily and a weekly report. How to proceed ?

Thank you in advance.

Tags (1)
0 Karma

to4kawa
Ultra Champion

Is the log in Splunk?

0 Karma

fgottilu
New Member

The log is not in splunk, I have just add the Domain Controller.

0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Community Feedback

We Want to Hear from You! Share Your Feedback on the Splunk Community   The Splunk Community is built for you ...

Manual Instrumentation with Splunk Observability Cloud: Implementing the ...

In our observability journey so far, we've built comprehensive instrumentation for our Worms in Space ...