Splunk Search

Finding duration for particular day if user did not disconnect session

himpawar
Observer

Hello,

How can I find the duration to check the actual active hours of a user for a perticular day if the VPN session was not disconnected for a long time?

For eg. for one 

Labels (6)
0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...