Splunk Search

How to create inventory that matches user to the devices they have logged into?

New Member

Hello All,

I am looking for a solution to establish a kind of IT inventory, based on logins.

Is there any working solution that matches users to devices they logged into?

Available source is AD and

wineventlog:security

Thank you for any ideas for a solution.

Labels (1)
Tags (1)
0 Karma

Contributor
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!