You are on page 1of 1

New Search

1 index=main EventCode=4624 Account_Name!="-" Account_Name!=SYSTEM Account_Name!=arjun Account_Name!


    ="LOCAL SERVICE" Account_Name!="DWM-1" Account_Name!="NETWORK SERVICE" Account_Name!="UMFD-1"
    Account_Name!="UMFD-0"
2 | dedup Account_Name
3 | table Account_Name time

Last 4 hours

✓ 12 events (10/10/2021 13:43:00.000 to 10/10/2021 17:43:32.000) No Event Sampling

Statistics (12)

Account_Name ↕  time ↕ 

EC2AMAZ-3AK96S1$ 11:07:33
sharath_a

EC2AMAZ-3AK96S1$ 11:00:46
aniekan

EC2AMAZ-3AK96S1$ 10:21:50
shahbhaz

EC2AMAZ-3AK96S1$ 10:10:49
dhanendra

EC2AMAZ-3AK96S1$ 10:03:22
krithika

EC2AMAZ-3AK96S1$ 10:01:06
prathibha

EC2AMAZ-3AK96S1$ 09:57:52
syed

EC2AMAZ-3AK96S1$ 09:57:34
nagarjuna

EC2AMAZ-3AK96S1$ 09:53:08
basavaraj_h

EC2AMAZ-3AK96S1$ 09:15:30
shalini

EC2AMAZ-3AK96S1$ 09:06:45
pooja

EC2AMAZ-3AK96S1$ 08:58:29
satheeshkumar

You might also like