Splunk Search

CurrentSessionLength TotalLoginLength in VMware Horizon Agent logs

user2020dy
Path Finder

Hello, guys,

I`m collecting logs from VMware Horizon client and here are 2 fields, the meaning of which I don`t clearly understand.

signal-2020-11-30-132004.jpeg

Is this length in seconds, minutes, hours?

 

And 2ond question: Maybe someone tried to calculate the session duration of Horizon logins and logons. Because here can be not only situations of simple logon and logoff , but also when the session was timed out and then the user reconnects. In ideal version I would like to check how many hours does the user spend using Horizon agent per day (to control working hours).

Labels (1)
0 Karma

to4kawa
Ultra Champion
0 Karma

inventsekar
Super Champion

Hi @user2020dy may we know the SPL query please.

>>> Maybe someone tried to calculate the session duration of Horizon logins and logons.

the original logs does not have these? is it a new project you have joined? can you please share with us some sample logs.. 
how many team members are there? maybe you can directly ask them, or better, check the calculated fields/alias/tags/macros of all users.

there is a document "inherited deployments" that is good for understanding a new Splunk environment. 

PS ... If any post helped you in any way, pls give a hi-five to the author with an upvote. if your issue got resolved, please accept the reply as solution.. thanks.
0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...