AWS User last login

[msilins]

Hi.

I want to create a search that checks for last user login date in AWS.
I can see them in AWS IAM and there are bunch of them that has last time logged in more than 300 days ago, but would be nice to see them in SPL.

I would appreciate if anyone can share their search or could tell me how to build one.

Thank you.

[meetmshah · Accepted solution]

Hello @msilins, here is something you are looking for - https://lantern.splunk.com/Splunk_Platform/UCE/IT_Modernization/Infrastructure_Monitoring/Managing_a...