I reported this issue to Solarwinds while we were on v5.4 and we were informed this was a known issue addressed in v5.6, however it still exists. I created an nDepth report where one of the lines reads:
UserLogon.DestinationAccount (Contains) Domain Admins
When you log out of the LEM and log back in, the logic changes and now reads"
Event Name (Contains) Domain Admins
And at that point the report will no longer run until you delete the bad line of logic and recreate it, however it always reverts back to "Event Info"
Does anyone else see this happening?
-Keith
