Hi Team,
We need an report which displays only individual user logins instead of displaying whole organization...Please help me with SWQL query or something for the same
Is this for Security Event Manager (SEM) or for the SolarWinds Platform with modules (NPM/NCM/NTA/SAM/VMAN, etc...)?If it is for SEM, and you are on the current version, you can create a query on the "Historical Events & Reports" tab. In this example, I'm looking for UserLogon events where the UserName field references a single user ("billybob"), and I've limited it to the last 7 days.Now that I have this query built, if I Save it I can run it whenever I'd like, but I could also directly export it out to a .PDF report and/or set it to be scheduled and emailed out or dropped to a file share periodically. I could also just pull the query up later, change the user name, and run it whenever I'd like.