Client Management Suite

Hi trying to get a report of user logon/logoff times for a particular user on a particular machine over a given date range

I've had a look through the std reports but can't see anything, has anyone done this ?

Thanks  C

Check this thread for query

https://www-secure.symantec.com/connect/forums/logon-times-user

See this thread

Help creating a SQL report for user logon and logoff times for specific OU

https://www-secure.symantec.com/connect/forums/help-creating-sql-report-user-logon-and-logoff-times-specific-ou

First post covered it but I had something related on my clipboard that is similar that can be worth sharing.

select c.Name, c.Domain, l.*

from Evt_AeX_Client_LogOn l

join

(

        select _ResourceGuid, MAX(_id) as '_id'

        from Evt_AeX_Client_LogOn l

        group by _ResourceGuid

) t

on l._id = t._id

join vComputer c

on l._ResourceGuid = c.Guid

In testing, if you get a graceful shutdown event, you do usually get a logoff event sent which is nice, but there can be reasons for missing one event or the other and i'd urge any customer not interested in these types of events to switch them off as they go immediately to the SMP.

Oh i missed explaining what the SQL did - its the very last event sent per computer. I was using it to track what hapened before the computer went offline.

A smal comments here: user logon/logoff events are not quite correct if you have version less than 7.5 SP1, a lot of problems related to these events have been fixed there.