Submit a ticketCall us

AnnouncementsChange Is Inevitable

Get valuable help when it comes to tracking and monitoring changes. SolarWinds® Server Configuration Monitor (SCM) is designed to help you: detect, track, and receive alerts when changes occur, correlate system performance against configuration changes, compare server and application configuration against custom baselines, and verify application and system changes.

Learn more.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Create an nDepth Query for All Activities by a Single User

Create an nDepth Query for All Activities by a Single User

Created by Karen Valdellon_ret, last modified by Caroline Juszczak on Feb 05, 2018

Views: 1,300 Votes: 2 Revisions: 10


Use nDepth to create queries for all activity related to a single user or group of users on your network. This is currently the only method to perform this level of reporting and monitoring in LEM.


  • All LEM versions


To create an nDepth query for all activity by a single user:

  1. Click the Explore tab, and then select nDepth.
  2. Clear all existing search parameters by clicking the x button on the far right of the Search Bar.
  3. Expand the Refine Fields list in the components pane on the left-middle column, and locate and expand the User Name field.
  4. Locate and select the bold User Name value from the list to display users. If the desired user does not appear, change the search time frame from the top-right to re-launch another search, or locate a different user under User Name.
  5. Drag User Name into the Search Bar at the top. If you choose a different user, change the user next to the pencil icon in the search. Otherwise, the user name will automatically
  6. Use this user name or change the user name in the text box on the right of the query, denoted by a pencil icon.
    • Use trailing wildcard characters, such as the asterisk (*), when you do not know the complete username.
    • Avoid using leading wildcard characters whenever possible.
    • Use User-Defined Groups or Directory Service Groups to search for groups of users.
  7. Modify the default time frame as preferred.
  8. Click Search, denoted by a blue play icon.


For more information about saving or exporting nDepth search results, see the Log & Event Manager Administrator Guide.

Last modified