Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Jul 20, 2014

APM logs via Splunk

Hi we are sending our logs off to splunk...i want to run a simple search that will pull back users who have logged in in the last 60 days. Can anyone reccomend an easy way to achieve this?

 

Cheers!

 

management

2 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Jul 21, 2014

    I'm not even sure APM logs logins/logouts clearly by default does it?

     

    I use an iRule myself to log this necessary info and then have the luxury of a custom format that can be read easily and quickly (And greps nicely too :) )

     

    H

     

  • cymru81's avatar
    cymru81
    Icon for Altocumulus rankAltocumulus
    Jul 22, 2014

    im not sure either tbh, just assumed?

     

    how do you implement an irule to do this and is it easily achievable? :)

     

    thanks!