Splunk Search

CurrentSessionLength TotalLoginLength in VMware Horizon Agent logs

user2020dy
Path Finder

Hello, guys,

I`m collecting logs from VMware Horizon client and here are 2 fields, the meaning of which I don`t clearly understand.

signal-2020-11-30-132004.jpeg

Is this length in seconds, minutes, hours?

 

And 2ond question: Maybe someone tried to calculate the session duration of Horizon logins and logons. Because here can be not only situations of simple logon and logoff , but also when the session was timed out and then the user reconnects. In ideal version I would like to check how many hours does the user spend using Horizon agent per day (to control working hours).

Labels (1)
0 Karma

to4kawa
SplunkTrust
SplunkTrust
0 Karma

inventsekar
Super Champion

Hi @user2020dy may we know the SPL query please.

>>> Maybe someone tried to calculate the session duration of Horizon logins and logons.

the original logs does not have these? is it a new project you have joined? can you please share with us some sample logs.. 
how many team members are there? maybe you can directly ask them, or better, check the calculated fields/alias/tags/macros of all users.

there is a document "inherited deployments" that is good for understanding a new Splunk environment. 

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!