Skip to main content


Splunk Lantern

Finding interactive logins from service accounts


  • Product: Splunk Enterprise or Splunk Cloud
  • Feature: Search
  • Function: Login auditing


Most service accounts should never interactively log into servers. You want to actively monitor your servers so you can quickly investigate if this happens.


Additional resources

For more great content from the Splunk Education and Training team, check out Splunk How-To on YouTube or sign up for a course

  • Was this article helpful?