Splunk – List REST API users and their IPs

Want to get a list REST API users and their IPs

Run this search

The limitation is if the users are going via a Load Balancer, you will see  Load Balancer’s IP as the clientip