Has anyone an idea how I could filter the user Logon Events(Event ID 4624) in LogInsight? (At the moment it shows me also the system accounts)
I saw some thing which helps in seeing user logon details from runtime.log :
Please check below:
Please consider marking this answer as correct and helpful if this helps you.