Submit a ticketCall us

AnnouncementsTHWACKcamp 2018 is here

2018 is the seventh year for THWACKcamp™, and once again we’ll be live October 17 – 18 with packed session tracks covering everything from network monitoring and management, to change control, application management, storage, cloud and DevOps, security, automation, virtualization, mapping, logging, and more.

Register for online sessions.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Create a custom report to show only interactive user logon events

Create a custom report to show only interactive user logon events

Table of contents
Created by Jason Dee, last modified by MindTouch on Jun 23, 2016

Views: 2,941 Votes: 2 Revisions: 4

Overview

This article describes how to create a custom Authentication - User Log On or Authentication - User Log On by User report that filters out everything but actual interactive logon events (physical logons).

Environment

All LEM versions

Steps

  1. Open your Reports Console and run an Authentication - User Log On or Authentication - User Log On by User report for the last 24 hours.
  2. Click on the Select Expert button and click New.
  3. Select the last field, USERLOGON_1.LOGONTYPE, and click OK.
  4. Change the drop down box to is equal to and change the second drop down box to Windows: Interactive and click OK. This will filter the report to show only interactive logon events.
  5. Click the Export button and change the Format to Crystal Reports (RPT). Save it to the CustomReports folder under your SolarWinds Log and Event Manager Reports installation folder.
  6. You can now press F5 to refresh your reports list and see your saved report by going to the Settings tab and changing the Category to Custom Reports.

 

 

 

Last modified

Tags

Classifications

Public