Hi need your support Splunkers I Want to search user created and deleted in 10 minutes. so i am starting the search like this: index=windows_auth EventID=4720 AND EventID=4726 Then I just got stuck, no matter what I tried. I need a data when these 2 events occur during 10 minutes on the same username. Thanks for your help !
... View more