Splunk Search

How to find the total count of users who had logged in from last 30 days in siteminder and tyayd applications

moiezuddin
Explorer

How to find the total count of users who had logged in from last 30 days in siteminder and tyayd applications
From index=idw source="dbmon-tail://idwarehouse/idw_account

Tags (3)
0 Karma

moiezuddin
Explorer

I got the aswer but it shows only one day result 2015-01-02

index=idw source="dbmon-tail://idwarehouse/idw_account" application=SiteMinder lastPasswordChange lastLogon="2015-01-02 10:" owner NOT [search index=idw source="dbmon-tail://idwarehouse/idw_account" application=TFAYD lastPasswordChange lastLogon="2015-01-02 10:" owner] | table owner, lastPasswordChange, application

Can anyone show me how to get 30 days result please

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...