Custom report showing the Latest Log-on, Log-Off, machine start and machine shut-down time

Products

• IT Management Suite

Issue/Introduction

Custom SQL report showing the Latest Log-on, Log-Off, machine start, and machine shut-down time along with the logged-in User on a Computer.

NA

Environment

ITMS 8.x, 8.7.x

Resolution

Create a custom SQL report on Symantec Management Console that should give you this information using the below sample SQL query.

************

select lo1._ResourceGuid _Guid, cid.[Name] Computer,
 (lo1.Domain + '\' + lo1.[User]) [User],
 lo1.[Event], lo1._eventTime [Event Time]
from Evt_AeX_Client_LogOn lo1
 join Inv_AeX_AC_Identification cid
  on cid._ResourceGuid = lo1._ResourceGuid
where exists
(
 select _ResourceGuid, _eventTime
 from
 (
  select lo2._ResourceGuid, max(lo2._eventTime) _eventTime
  from Evt_AeX_Client_LogOn lo2
  group by lo2._ResourceGuid, lo2.[Event]
 ) lo3
 where lo1._ResourceGuid = lo3._ResourceGuid
  and lo1._eventTime = lo3._eventTime
)
order by [User] asc, [Event Time] desc

**********

Example :

Open the Symantec Management Console and Go to Reports>> All Reports

Click on “New Report”

Select “Base Report”

Enter the Name for the report here we have given the Name as TEST

Select the Report type as SQL Report, then click on Create

Select the Test ( report which we created ) and click on Edit

 

Select the Parameterized Query and copy paste the above SQL query here and Save the Changes.

Result of the report will looks like below.

 

NOTE: Please note that Broadcom Support does not support custom scripting or reporting so Creation and modifications to the script and report must be made by the user. Please contact Broadcom Consulting Services for assistance with creating custom inventory scripts or custom reports, who can be reached here:

Broadcom Consulting Services 
https://www.broadcom.com/company/partners/symantec