All,
Is there an Api call or search I can run to get a list of users who can log into Splunk? bonus points if we can see the last time they logged in.
thanks
-Daniel
Did you check this? Kindly upvote the original post if it helped
https://answers.splunk.com/answers/330563/find-latest-login-per-user-and-ip-address.html