I am trying to setup a dashboard to show how much time each user spent using Splunk each week.
Anyone got any suggestions how I can track user activity time in spunk _Internal or _Audit indexes.
I am trying to setup a dashboard to show how much time each user spent using Splunk each week.
Anyone got any suggestions how I can track user activity time in spunk _Internal or _Audit indexes.