Would someone know how to find out who is logged into a specific computer?

[SplunkMiester]

Would someone know how to find out who is logged into a specific computer. Thanks in advance!

[SplunkMiester]

Actually, I'm looking to do two things:

Finding computer based on username

Finding users logged into a computer

[richgalloway]

We don't have much to work with.  The exact steps to follow depend on the OS the computer is using as well as what data you have in Splunk.  For instance, if logins are not indexed then you won't be able to find out who is logged in to any computer.

A sample query for logins to a specific computer is

index=windows EventCode=4768 ComputerName=somecomputer
| table _time Account_Name