A search for all users of Safari should just be directed to your web access logs and the Safari or AppleWebKit keyword:
sourcetype=access_combined Safari AppleWebKit
Alternatively, you probably want to extract the user agent string and group by that. To do that, you should use the built in extractions for iis or apache. If you are using apache, simply classify your sourcetype for these logs as access_combined.