"DomianName".SSO\Administrator

[rami2000]

Hi all

we work with VMware Horizon 7 (7.5.0 build-8583568)

In our SIEM we get all the time that message from Horizon :

type="UserLoginSessionEvent" chainId="4610561" fullFormattedMessage="User "DomainName".SSO\Administrator@"IP Address" logged in as Apache-CXF/3.1.15" userAgent="Apache-CXF/3.1.15" ipAddress="IP Address" locale="en" createdTime="2019-10-16T13:49:14.237Z" key="4610561" sessionId="525be305-3853-bfac-f8fc-9e8fe265a671" userName="DomainName".SSO\Administrator

what should be do/check to clear this event ?

Thank you ,

Rami

[rami2000]

Someone  ?

[HussamRabaya · Accepted solution]

this an event and notification that user logged in

set the SIEM to ignore it

[rami2000]

Hi

I thought of that option , but wanted to avoid that

Rami