Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Create an nDepth Query for All Activities by a Single User

Create an nDepth Query for All Activities by a Single User

Created by Karen Valdellon_ret, last modified by Caroline Juszczak on Feb 05, 2018

Views: 1,392 Votes: 2 Revisions: 10


Use nDepth to create queries for all activity related to a single user or group of users on your network. This is currently the only method to perform this level of reporting and monitoring in LEM.


  • All LEM versions


To create an nDepth query for all activity by a single user:

  1. Click the Explore tab, and then select nDepth.
  2. Clear all existing search parameters by clicking the x button on the far right of the Search Bar.
  3. Expand the Refine Fields list in the components pane on the left-middle column, and locate and expand the User Name field.
  4. Locate and select the bold User Name value from the list to display users. If the desired user does not appear, change the search time frame from the top-right to re-launch another search, or locate a different user under User Name.
  5. Drag User Name into the Search Bar at the top. If you choose a different user, change the user next to the pencil icon in the search. Otherwise, the user name will automatically
  6. Use this user name or change the user name in the text box on the right of the query, denoted by a pencil icon.
    • Use trailing wildcard characters, such as the asterisk (*), when you do not know the complete username.
    • Avoid using leading wildcard characters whenever possible.
    • Use User-Defined Groups or Directory Service Groups to search for groups of users.
  7. Modify the default time frame as preferred.
  8. Click Search, denoted by a blue play icon.


For more information about saving or exporting nDepth search results, see the Log & Event Manager Administrator Guide.

Last modified