search

aplura / Tango

Honeypot Intelligence with Splunk
GNU General Public License v2.0
255 stars 43 forks source link

Calculate % of sessions w/ interaction #5

Closed brianwarehime closed 9 years ago

brianwarehime commented 9 years ago

Get the number of sessions with interaction (cmd=_) vs. not interaction (eventtype=loginsuccess and cmd!=)