Date/Time , logon or logoff, Event ID, Username, SessionID, Source IPAddress, Computer user logged onto.
Eg:
2015-04-28T15:38:22,23,logoff,andrewst,6,,Server08
2015-04-28T15:36:37,23,logoff,sheffieldd,3,,Server10
2015-04-28T15:30:40,21,logon,ryank,4,172.16.0.122,Server08
2015-04-28T15:21:13,23,logoff,powelll,8,,Server09
2015-04-28T15:12:35,21,logon,sheffieldd,3,172.16.0.138,Server10
You can get the script here: http://pastebin.com/4vhqVCQE
No comments:
Post a Comment