Creation and Login Time

Splunk Search

Hi Guys,

I need to create an alert that returns the creation time of an account and the first login.

How can I run this search?

Tks guys.

Hi wvalente,
could you share more information (e.g.: os, etc...)?
Bye.
Giuseppe

In this case, I have windows and linux.

Get Updates on the Splunk Community!

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...

Are you a member of the Splunk Community?