Hi I need help to create a query on ITS. We have some terminal server, on Intrust we logged this events: Windows-TerminalServices LocalSessionManager/Operational Log Windows Security log We need to track LOGIN and LOGOFF events for single users. If I search the events "eventid="4624" I get to many LOGONs events (same time) for one user. I need the single event. Thanks for help me Faye

Forum LOGON & LOGOFF events

Options

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LOGON & LOGOFF events

Faye Müller over 5 years ago

I need help to create a query on ITS.

We have some terminal server, on Intrust we logged this events:

We need to track LOGIN and LOGOFF events for single users.

If I search the events "eventid="4624" I get to many LOGONs events (same time) for one user.

I need the single event.

Thanks for help me

Faye