cancel
Showing results for 
Search instead for 
Did you mean: 
saar2k
Level 7
Report Inappropriate Content
Message 1 of 3

Query of Client Evenets

Hello

Right now I know that I can creat a query that checks if a specific user is logged in the same time in some computers in a segment of IPs,

but I want to know if I can put a list of users (let's say, using the LDAP option to communicate with my Active Directory DB) and get a list of users which are logged in few computers in the same time in a segment of IPs.

Example :

User513 logged in Comp1, Comp2, Comp3

User913 logged in Comp5987, Comp123, Comp6234

etc...

Thanks!

2 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Query of Client Evenets

You can create a Multi Group Summary Table and select User Name for the first label and System Name for the 2nd label. Then you will have to set the filter to further restrict this to only events which have occured recently or to only certian IP ranges.

saar2k
Level 7
Report Inappropriate Content
Message 3 of 3

Re: Query of Client Evenets

But how can I put a list of users? with the LDAP options? what should I write exactly in the LDAP option?

Should I choose the Client Events query for sure or something else?