You can check out the report available for download here: https://www-secure.symantec.com/connect/downloads/...

or use something like:

SELECT    DISTINCT T1.[Guid] AS 'Guid',
        T1.[Name] AS 'Name',
        T0.[Event] AS 'Event',
        T0.[User] AS 'User',
        T0.[Domain] AS 'Domain',
        T0.[Time] AS 'Time'
FROM [vResourceEx] T1
INNER JOIN [Evt_AeX_Client_LogOn] T0 ON T1.[Guid] = T0.[_ResourceGuid]
WHERE T1.[ResourceTypeGuid] = '493435F7-3B17-4C4C-B07F-C23E7AB7781F'  --type = computer
  AND T1.[IsManaged] = 1 -- is managed
  --AND CONVERT(CHAR(10),T0.[Time],101) BETWEEN '09/01/2009' AND '09/10/2009' -- narrowed b/w date and times
  --AND CONVERT(CHAR(10),T0.[Time],114) BETWEEN '00:00' AND '23:59'
ORDER BY T0.[Time] ASC

You can change the where clause to whatever you want, like querying for a specific user or workstation.

RS