For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Jul 21, 2014

APM logs via Splunk

Hi we are sending our logs off to splunk...i want to run a simple search that will pull back users who have logged in in the last 60 days. Can anyone reccomend an easy way to achieve this?

 

Cheers!

 

management

2 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Jul 21, 2014

    I'm not even sure APM logs logins/logouts clearly by default does it?

     

    I use an iRule myself to log this necessary info and then have the luxury of a custom format that can be read easily and quickly (And greps nicely too :) )

     

    H

     

  • cymru81's avatar
    cymru81
    Icon for Altocumulus rankAltocumulus
    Jul 22, 2014

    im not sure either tbh, just assumed?

     

    how do you implement an irule to do this and is it easily achievable? :)

     

    thanks!