Splunk Search for Database Connect (DBX) Connections by Identity Username Copy
| rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-identities | rename title as user_title | map [ | rest splunk_server=local /servicesNS/-/splunk_app_db_connect/configs/conf-db_connections | search disabled=0 AND identity="$user_title$" | eval username="$username$", domain_name="$domain_name$" ] | table title connection_type database host identity username domain_name
0 comments