JacSad · ***** · ✭

@bobmarley thanks for help, it works.

Can we implement collecting these logs and retrieve reports with Observability Self-Hosted Advanced Enterprise Licence ?

Thanks for your answer. I figured out that I can use tags with user's login/logout/failed and event ID, but we have few Domain Controllers. Users are not logged into only one. Does it mean we need to install agents to every DC that can authenticate user ?