Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Database table and columns to run Login reports

  • 1.  Database table and columns to run Login reports

    Posted Jan 28, 2015 04:04 PM

    Refer previous thread, 

    https://www-secure.symantec.com/connect/forums/sep-12-ru4-management-console-access

     

    What are the tables, and columns in SEPM Database schema that would allow me to query :

    Log: Administrative

    Event Type: Login succeeded, Logout

    Administrative: the actual user

     

    Thanks



  • 2.  RE: Database table and columns to run Login reports
    Best Answer

    Posted Jan 28, 2015 04:16 PM

    Looks like the table is:

    SYSTEM_REPORT

    Column is:

    EVENT_ID

    Possible values are:

    ADMIN_ADMIN_TYPES=Administrator events. Possible values:
    4097=Login succeeded
    4098=Login failed
    4099=Logout
    4050=Account locked
    4101=Account unlocked
    4102=Account disabled
    4103=Account enabled
    4104=Administrator created
    4105=Administrator deleted
    4106=Administrator renamed
    4107=Password changed
    4108=Administrator properties are changed
     

    so probably 4097/4098/4099



  • 3.  RE: Database table and columns to run Login reports

    Posted Jan 28, 2015 04:20 PM

    You da best!



  • 4.  RE: Database table and columns to run Login reports

    Posted Jan 28, 2015 04:21 PM

    Happy to help :)