Splunk Search

CurrentSessionLength TotalLoginLength in VMware Horizon Agent logs

user2020dy
Path Finder

Hello, guys,

I`m collecting logs from VMware Horizon client and here are 2 fields, the meaning of which I don`t clearly understand.

signal-2020-11-30-132004.jpeg

Is this length in seconds, minutes, hours?

 

And 2ond question: Maybe someone tried to calculate the session duration of Horizon logins and logons. Because here can be not only situations of simple logon and logoff , but also when the session was timed out and then the user reconnects. In ideal version I would like to check how many hours does the user spend using Horizon agent per day (to control working hours).

Labels (1)
0 Karma

to4kawa
Ultra Champion
0 Karma

inventsekar
Super Champion

Hi @user2020dy may we know the SPL query please.

>>> Maybe someone tried to calculate the session duration of Horizon logins and logons.

the original logs does not have these? is it a new project you have joined? can you please share with us some sample logs.. 
how many team members are there? maybe you can directly ask them, or better, check the calculated fields/alias/tags/macros of all users.

there is a document "inherited deployments" that is good for understanding a new Splunk environment. 

PS ... If any post helped you in any way, pls give a hi-five to the author with an upvote. if your issue got resolved, please accept the reply as solution.. thanks.
0 Karma
Get Updates on the Splunk Community!

Security Highlights: September 2022 Newsletter

 September 2022 The Splunk App for Fraud Analytics (SFA) is now Splunk SupportedUse your existing Splunk ...

Platform Highlights | September 2022 Newsletter

 September 2022 What’s New in 9.0 and How to UpgradeGet a walk through of what is new Splunk Enterprise 9.0 ...

Observability Highlights | September 2022 Newsletter

 September 2022 Splunk Observability SuiteAccess to "Classic" SignalFx Interface Will be Removed on Sept 30, ...