Submit a ticketCall us
Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Using nDepth to locate Windows hosts running the Reports console

Using nDepth to locate Windows hosts running the Reports console

Table of contents

Updated: October 5, 2017

Overview

This article describes how to use nDepth to locate internal events indicating which Microsoft® Windows® host is running them.

Environment

  • All LEM versions

Steps

  1. Log in to the LEM console. 
  2. Click Explore and select nDepth.
  3. Search the desired time frame using the following query:


    InteranlInfo.EventInfo = SWLEM Reports*

 

After you locate any Reports events, the DetectionIP field indicates which host is actually running them.

 

 

 

Last modified

Tags

Classifications

Public