Hello Everyone
Has anyone an idea how I could filter the user Logon Events(Event ID 4624) in LogInsight? (At the moment it shows me also the system accounts)
Kind regards
Steve
Hi
I saw some thing which helps in seeing user logon details from runtime.log :
Please check below:
http://virtualkenneth.com/2017/01/10/filtering-and-auditing-within-log-insight/
Please consider marking this answer as correct and helpful if this helps you.
regards
GS