Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > Create an nDepth Query for All Activities by a Single User

Create an nDepth Query for All Activities by a Single User

Created by Karen Valdellon, last modified by Melanie Boyd on Oct 21, 2016

Views: 115 Votes: 2 Revisions: 9


Use nDepth to create queries for all activity related to a single user or group of users on your network. This is currently the only method to perform this level of reporting and monitoring in LEM.


  • All LEM versions


To create an nDepth query for all activity by a single user:

  1. Click the Explore tab, and then select nDepth.
  2. Clear all existing search parameters by clicking the x button on the far right of the Search Bar.
  3. Expand the Refine Fields list in the components pane on the left-middle column, and locate and expand the User Name field.
  4. Locate and select the bold User Name value from the list to display users. If the desired user does not appear, change the search time frame from the top-right to re-launch another search, or locate a different user under User Name.
  5. Drag User Name into the Search Bar at the top. If you choose a different user, change the user next to the pencil icon in the search. Otherwise, the user name will automatically
  6. Use this user name or change the user name in the text box on the right of the query, denoted by a pencil icon.
    • Use trailing wildcard characters, such as the asterisk (*), when you do not know the complete username.
    • Avoid using leading wildcard characters whenever possible.
    • Use User-Defined Groups or Directory Service Groups to search for groups of users.
  7. Modify the default time frame as preferred.
  8. Click Search, denoted by a blue play icon.


For more information about saving or exporting nDepth search results, see the following:

Last modified