Splunk Search

The  start time and time spent on dashboards ,viewing , per user

mlevsh
Builder

We are trying to figure out if it is possible to get info from internal log files the  start time and time spent on dashboards (viewing) per user for our monthly report . 

Any ideas if it is possible? 


We are running  Splunk Cloud 8.2.2106  , upgrading to 8.2.2109 soon

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
Hi
It’s possible to get start/launch time from internal/audit logs, but there in no way to get this information when user leaves dashboard/ end splunk session.
r. Ismo

mlevsh
Builder

@isoutamo , thank you. Thought so, but really hoped for a different answer. 

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...