Splunk – List REST API users and their IPs

Want to get a list REST API users and their IPs?

Run this search

The limitation is if the users are going via a Load Balancer, you will see  Load Balancer’s IP as the clientip

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.