Security Compliance

SEM Interactive User Logons filter conditions

This article shows the default conditions used for the Interactive User Logons filter under the Authentication section.

First published date

11/1/2018 4:02 PM

Last published date

11/1/2018 4:02 PM

Overview

This article applies to Security Event Manager (formerly Log & Event Manager).

This article provides the default conditions used for the Interactive User Logons filter under the Authentication section.

Product section

Security Event Manager

Resolution

  1. Create an nDepth search for: ( "Event Name" = UserLogon ) AND ( LogonType = *interactive* )

See the Default SEM filter conditions on the Web Console Monitor page  page article for a full list of available default filters in SEM.