Splunk search for Successful linux logins by source IP
Copy
sourcetype=linux_secure tag=authentication action=success | stats values(user) as user, count by src
This search will provide a breakdown the number of successful logins to a linux system by user and source IP
0 comments
[0]
[0]
[0]
[0]
Sign in or Register to submit a comment