Dashboards & Visualizations

How to show the number of logins and time length logged in and create a graph to show a visualization?

schneiderjc
New Member

I'm new to splunk and I have 2 machines with forwarder pushing to my splunk computer. I want to know is it possible to show the number of logins and time length they are logged in. I want to put this is a graph if possible. I'm trying to show my boss that people are using these 2 computers.

Tags (2)
0 Karma

lguinn2
Legend

What kind of information are you putting into Splunk? is it Windows or Linux or...?
Are both logins and logouts recorded? Can you give an example of what each event looks like?

This sort of search is pretty easy to do, but the community needs a little more information in order to help you...

0 Karma

schneiderjc
New Member

using a windows environment. Logins are recorded can see them. However my boss wants to know how many people use these computers in a 7 day windows and how long they are used for.

0 Karma

lguinn2
Legend

So could you identify logins/logouts using Windows Event Codes? (I am not a Windows person.) What event codes do you use for valid logins and logouts?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...