This will find all Users created in the last 60 days which are not Support Users. Adapt the date range to your specific case. 

audit.creationDate:[now-60d TO now] AND isSupportUser:false
CODE

The following attributes exists in the search: 

  • ✔isLocked:false

  • ✔isSupportUser:false

The following attributes do not exist in the search:

  • ❌isReadOnly:false

  • ❌isFederated:true

  • ❌isDeleted:true