BC559
Enthusiast
Enthusiast

Others in this thread are correct it would depend on your architecture but SQL Queries in SQL Server Management Studio (SSMS) are helpful and may give you what you need. You can run something like below query against the EventDB. The below example will give you all the connections from the previous month with the Connection Server they connected to and the "ForwardedClientIPaddress" would be the IP they are connecting from. You could run something like this and just get want by filtering the results by your external facing servers or the clients IPs.

SELECT * FROM

(SELECT        event.EventID,event.Time, event.Node AS [Connection Server], event_data.Name, event_data.StrValue

FROM            event INNER JOIN

                         event_data ON event.EventID = event_data.EventID

WHERE        (event.EventType = 'BROKER_USERLOGGEDIN')

AND

event.Time >= DATEADD(mm,DATEDIFF(mm,0,GETDATE())-1,0)

AND event.Time < DATEADD(mm,DATEDIFF(mm,0,GETDATE()),0)

)

t

    PIVOT

    (

        MAX(strvalue)

        FOR NAME in ("BrokerSessionId","ClientIPaddress", "ForwardedClientIPaddress", "UserDisplayname")

    ) p

ORDER BY TIME ASC

Reply
0 Kudos