COVID-19 Response
SplunkBase
Developers
Documentation
Browse
Community
Community
Splunk Answers
Splunk Administration
Deployment Architecture
Installation
Security
Getting Data In
Knowledge Management
Monitoring Splunk
Using Splunk
Splunk Search
Reporting
Alerting
Dashboards & Visualizations
Splunk Development
Developing for Splunk Enterprise
Developing for Splunk Cloud Services
Splunk Platform Products
Splunk Enterprise
Splunk Cloud Platform
Splunk Data Stream Processor
Splunk Data Fabric Search
Splunk Premium Solutions
Security Premium Solutions
IT Ops Premium Solutions
DevOps Premium Solutions
Apps and Add-ons
All Apps and Add-ons
Discussions
Community Blog
Training + Certification
Career Resources
#Random
Getting Started
Community Announcements
Welcome
Intros
Feedback
Splunk Tech Talks
Product News & Announcements
BOSS: BOO & BOTS
BOSS Calendar
BOSS Announcements
SplunkTrust
User Groups
Americas
Europe, Middle East and Africa
Asia-Pacific
Industry
Splunk Love
Ideas
Sign In
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
All community
Knowledge base
nando10
Users
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Ask a Question
About nando10
nando10
Explorer
Member since:
11-01-2019
06-05-2020
Community Statistics
Posts
7
Solutions
0
Karma Given
0
Karma Received
1
Member Since
11-01-2019
View all badges
Activity Feed
Got Karma for
How to identity logoffs when there isn't always a logoff event
.
06-05-2020
12:50 AM
Posted
Re: How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-08-2019
08:47 AM
Posted
Re: How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-08-2019
08:45 AM
Posted
Re: How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-08-2019
08:43 AM
Posted
Re: How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-07-2019
04:15 AM
Posted
Re: How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-07-2019
04:13 AM
Posted
Re: How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-07-2019
04:12 AM
Posted
How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-02-2019
05:20 AM
Tagged
How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-02-2019
05:20 AM
Tagged
How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-02-2019
05:20 AM
Tagged
How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-02-2019
05:20 AM
Tagged
How to identity logoffs when there isn't always a logoff event
on
Splunk Enterprise Security
.
11-02-2019
05:20 AM
Topics I've Started
Subject
Karma
Author
Latest Post
How to identity logoffs when there isn't always a ...
Splunk Enterprise Security
1
nando10
11-08-2019
08:47 AM
by
nando10
View All
Topics nando10 has Participated In
Topics nando10 has Participated In
Latest Contributions by nando10
Re: How to identity logoffs when there isn't alway...
by
nando10
in
Splunk Enterprise Security
11-08-2019
08:47 AM
11-08-2019
08:47 AM
Transaction is getting me close but now I am struggling with bucketing only "logon" and "logoff" entry together. Depending on the maxspan value, it may or may not bucket correctly. I've altered my original post with the syntax.
... View more
Contact Me
Online Status
Offline
Date Last Visited
06-05-2020
02:04 AM
Karma from
User
Karma Count
landen99
1
View All