SPL to find first time account access

[corecomputetool]

To find the user first time login in PCI compilance - what is the SPL query ?

I am using the query as below :

| from inputlookup:access_tracker | stats min(firstTime) as firstTime,values(dest) as dest by user | sort 100 - firstTime | uitime(firstTime) | fields dest user firstTime

[Adrian_ftx]

Hi,

Can you provide a sample of your data and the expected result please?
Can you share the return of your SPL request too please?

Best regards,
Adrian