This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Remote Assistance filter

I'm looking to create a filter for Remote Assistance sessions. Has anyone figured out a way to do this that captures the account information of the connecting "expert"? I see events for the logon and events that show the process start, but don't see a good way to capture both of these correlating events in the same filter or a single event that captures both pieces of info.