I'm trying to find which hosts a particular user has logged in to. I have the user's name, but I cannot figure out the systems they have used.
Have you tried creating a table with the username and host field? The field name for username, login message, and host may differ in your situation.
Example: 'Successful-login-message' | table _time username host
I have not tried that yet. Thank you for the suggestion.
