I created an user account lockout report for our help desk to use so that they can find out why the user was locked out. This report looks at user lockout events. It will list who is locked out and which system the lockout originated from.
I had to use a SQL query in order to strip out the user and the system where the lockout originated from. I don't believe string manipulation is supported in SWQL.
Hopefully this will help someone else out there.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.