- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Others in this thread are correct it would depend on your architecture but SQL Queries in SQL Server Management Studio (SSMS) are helpful and may give you what you need. You can run something like below query against the EventDB. The below example will give you all the connections from the previous month with the Connection Server they connected to and the "ForwardedClientIPaddress" would be the IP they are connecting from. You could run something like this and just get want by filtering the results by your external facing servers or the clients IPs.
SELECT * FROM
(SELECT event.EventID,event.Time, event.Node AS [Connection Server], event_data.Name, event_data.StrValue
FROM event INNER JOIN
event_data ON event.EventID = event_data.EventID
WHERE (event.EventType = 'BROKER_USERLOGGEDIN')
AND
event.Time >= DATEADD(mm,DATEDIFF(mm,0,GETDATE())-1,0)
AND event.Time < DATEADD(mm,DATEDIFF(mm,0,GETDATE()),0)
)
t
PIVOT
(
MAX(strvalue)
FOR NAME in ("BrokerSessionId","ClientIPaddress", "ForwardedClientIPaddress", "UserDisplayname")
) p
ORDER BY TIME ASC