Right now I know that I can creat a query that checks if a specific user is logged in the same time in some computers in a segment of IPs,
but I want to know if I can put a list of users (let's say, using the LDAP option to communicate with my Active Directory DB) and get a list of users which are logged in few computers in the same time in a segment of IPs.
User513 logged in Comp1, Comp2, Comp3
User913 logged in Comp5987, Comp123, Comp6234
You can create a Multi Group Summary Table and select User Name for the first label and System Name for the 2nd label. Then you will have to set the filter to further restrict this to only events which have occured recently or to only certian IP ranges.
But how can I put a list of users? with the LDAP options? what should I write exactly in the LDAP option?
Should I choose the Client Events query for sure or something else?