Sunday, January 6, 2013

SCOM ACS User Logon Report

This is a report I created for the Audit Collection Services of System Center Operations Manager that lists all successful user logons details in all servers.



The report only requires start and end date parameters to run.



Event ID 4624 indicates a successful logon event on the local computer. Logon Type 10 means a remote interactive logon and the client IP address will show while Logon Type 2 means a local logon from the system console.

Event ID 4778 means a user has reconnected to an existing session in which case the Logon Type field will show the session ID.

Please note that these Event IDs have been introduced in Windows Server 2008/Vista, so the reports works only with these OSes or higher, it will not work with Windows Server 2003/XP.

To deploy the report, save the xml at the bottom as UserLogon.rdl then run the Report Builder from the Report Manager website






Click Open and browse to the report rdl file.



Verify the data source is OK




Feel free to customize it as per your likings, then save it to the ACS "Audit Reports" folder.

I have tested it on SCOM 2007 R2 and SCOM 2012.

Start copy below

<?xml version="1.0" encoding="utf-8"?>
<Report xmlns:rd="http://schemas.microsoft.com/SQLServer/reporting/reportdesigner" xmlns:cl="http://schemas.microsoft.com/sqlserver/reporting/2010/01/componentdefinition" xmlns="http://schemas.microsoft.com/sqlserver/reporting/2010/01/reportdefinition">
  <AutoRefresh>0</AutoRefresh>
  <DataSources>
    <DataSource Name="Audit">
      <DataSourceReference>/Audit Reports/Audit</DataSourceReference>
      <rd:SecurityType>None</rd:SecurityType>
      <rd:DataSourceID>0136229f-a3cb-4df7-a401-fbadf2ae2cb5</rd:DataSourceID>
    </DataSource>
  </DataSources>
  <DataSets>
    <DataSet Name="DataSet1">
      <Query>
        <DataSourceName>Audit</DataSourceName>
        <QueryParameters>
          <QueryParameter Name="Logon Time">
            <Value>=Parameters!Logon_Time.Value</Value>
          </QueryParameter>
          <QueryParameter Name="Logon Time1">
            <Value>=Parameters!Logon_Time1.Value</Value>
          </QueryParameter>
        </QueryParameters>
        <CommandText>&lt;SemanticQuery xmlns="http://schemas.microsoft.com/sqlserver/2004/10/semanticmodeling" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:qd="http://schemas.microsoft.com/sqlserver/2004/11/semanticquerydesign" xmlns:rb="http://schemas.microsoft.com/sqlserver/2004/11/reportbuilder"&gt;
  &lt;Hierarchies&gt;
    &lt;Hierarchy&gt;
      &lt;BaseEntity&gt;
        &lt;!--Audit Data--&gt;
        &lt;EntityID&gt;G84916cb4-85b5-4a29-97cf-249b0b43b9f4&lt;/EntityID&gt;
      &lt;/BaseEntity&gt;
      &lt;Groupings&gt;
        &lt;Grouping Name="Logon Time"&gt;
          &lt;Expression Name="Logon Time"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Logon Time--&gt;
              &lt;AttributeID&gt;G432cfb7f-4dce-4e31-8aaf-5db534bdec6d&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Target User"&gt;
          &lt;Expression Name="Target User"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Target User--&gt;
              &lt;AttributeID&gt;Gd2278cd8-ca70-448a-b39b-e08854e5aa1a&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Event Machine"&gt;
          &lt;Expression Name="Event Machine"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Event Machine--&gt;
              &lt;AttributeID&gt;Gd81289ed-1b2f-4914-973e-ae952739341f&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Logon Type"&gt;
          &lt;Expression Name="Logon Type"&gt;
            &lt;AttributeRef&gt;
              &lt;!--String 02--&gt;
              &lt;AttributeID&gt;Ge94da650-87be-438d-889d-d9584df072ce&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Client Address"&gt;
          &lt;Expression Name="Client Address"&gt;
            &lt;AttributeRef&gt;
              &lt;!--String 03--&gt;
              &lt;AttributeID&gt;G9b3954f6-b6e3-484c-aa18-93e4a1dbef9a&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Event Id"&gt;
          &lt;Expression Name="Event Id"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Event Id--&gt;
              &lt;AttributeID&gt;G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
      &lt;/Groupings&gt;
      &lt;Filter&gt;
        &lt;Expression Name="expr1"&gt;
          &lt;Function&gt;
            &lt;FunctionName&gt;And&lt;/FunctionName&gt;
            &lt;Arguments&gt;
              &lt;Expression&gt;
                &lt;Function&gt;
                  &lt;FunctionName&gt;GreaterThanOrEquals&lt;/FunctionName&gt;
                  &lt;Arguments&gt;
                    &lt;Expression&gt;
                      &lt;AttributeRef&gt;
                        &lt;!--Logon Time--&gt;
                        &lt;AttributeID&gt;G432cfb7f-4dce-4e31-8aaf-5db534bdec6d&lt;/AttributeID&gt;
                      &lt;/AttributeRef&gt;
                    &lt;/Expression&gt;
                    &lt;Expression&gt;
                      &lt;ParameterRef&gt;
                        &lt;ParameterName&gt;Logon Time&lt;/ParameterName&gt;
                      &lt;/ParameterRef&gt;
                    &lt;/Expression&gt;
                  &lt;/Arguments&gt;
                &lt;/Function&gt;
                &lt;CustomProperties&gt;
                  &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                &lt;/CustomProperties&gt;
              &lt;/Expression&gt;
              &lt;Expression&gt;
                &lt;Function&gt;
                  &lt;FunctionName&gt;And&lt;/FunctionName&gt;
                  &lt;Arguments&gt;
                    &lt;Expression&gt;
                      &lt;Function&gt;
                        &lt;FunctionName&gt;LessThanOrEquals&lt;/FunctionName&gt;
                        &lt;Arguments&gt;
                          &lt;Expression&gt;
                            &lt;AttributeRef&gt;
                              &lt;!--Logon Time--&gt;
                              &lt;AttributeID&gt;G432cfb7f-4dce-4e31-8aaf-5db534bdec6d&lt;/AttributeID&gt;
                            &lt;/AttributeRef&gt;
                          &lt;/Expression&gt;
                          &lt;Expression&gt;
                            &lt;ParameterRef&gt;
                              &lt;ParameterName&gt;Logon Time1&lt;/ParameterName&gt;
                            &lt;/ParameterRef&gt;
                          &lt;/Expression&gt;
                        &lt;/Arguments&gt;
                      &lt;/Function&gt;
                      &lt;CustomProperties&gt;
                        &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                      &lt;/CustomProperties&gt;
                    &lt;/Expression&gt;
                    &lt;Expression&gt;
                      &lt;Function&gt;
                        &lt;FunctionName&gt;And&lt;/FunctionName&gt;
                        &lt;Arguments&gt;
                          &lt;Expression&gt;
                            &lt;Function&gt;
                              &lt;FunctionName&gt;In&lt;/FunctionName&gt;
                              &lt;Arguments&gt;
                                &lt;Expression&gt;
                                  &lt;AttributeRef&gt;
                                    &lt;!--Event Id--&gt;
                                    &lt;AttributeID&gt;G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419&lt;/AttributeID&gt;
                                  &lt;/AttributeRef&gt;
                                &lt;/Expression&gt;
                                &lt;Expression&gt;
                                  &lt;Literal&gt;
                                    &lt;DataType&gt;Integer&lt;/DataType&gt;
                                    &lt;Values&gt;
                                      &lt;Value&gt;4778&lt;/Value&gt;
                                      &lt;Value&gt;4624&lt;/Value&gt;
                                    &lt;/Values&gt;
                                  &lt;/Literal&gt;
                                &lt;/Expression&gt;
                              &lt;/Arguments&gt;
                            &lt;/Function&gt;
                            &lt;CustomProperties&gt;
                              &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                            &lt;/CustomProperties&gt;
                          &lt;/Expression&gt;
                          &lt;Expression&gt;
                            &lt;Function&gt;
                              &lt;FunctionName&gt;And&lt;/FunctionName&gt;
                              &lt;Arguments&gt;
                                &lt;Expression&gt;
                                  &lt;Function&gt;
                                    &lt;FunctionName&gt;Not&lt;/FunctionName&gt;
                                    &lt;Arguments&gt;
                                      &lt;Expression&gt;
                                        &lt;Function&gt;
                                          &lt;FunctionName&gt;NotEquals&lt;/FunctionName&gt;
                                          &lt;Arguments&gt;
                                            &lt;Expression&gt;
                                              &lt;Function&gt;
                                                &lt;FunctionName&gt;Find&lt;/FunctionName&gt;
                                                &lt;Arguments&gt;
                                                  &lt;Expression&gt;
                                                    &lt;AttributeRef&gt;
                                                      &lt;!--Target User--&gt;
                                                      &lt;AttributeID&gt;Gd2278cd8-ca70-448a-b39b-e08854e5aa1a&lt;/AttributeID&gt;
                                                    &lt;/AttributeRef&gt;
                                                  &lt;/Expression&gt;
                                                  &lt;Expression&gt;
                                                    &lt;Literal&gt;
                                                      &lt;DataType&gt;String&lt;/DataType&gt;
                                                      &lt;Value&gt;$&lt;/Value&gt;
                                                    &lt;/Literal&gt;
                                                  &lt;/Expression&gt;
                                                &lt;/Arguments&gt;
                                              &lt;/Function&gt;
                                            &lt;/Expression&gt;
                                            &lt;Expression&gt;
                                              &lt;Literal&gt;
                                                &lt;DataType&gt;Integer&lt;/DataType&gt;
                                                &lt;Value&gt;0&lt;/Value&gt;
                                              &lt;/Literal&gt;
                                            &lt;/Expression&gt;
                                          &lt;/Arguments&gt;
                                        &lt;/Function&gt;
                                      &lt;/Expression&gt;
                                    &lt;/Arguments&gt;
                                  &lt;/Function&gt;
                                  &lt;CustomProperties&gt;
                                    &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                                  &lt;/CustomProperties&gt;
                                &lt;/Expression&gt;
                                &lt;Expression&gt;
                                  &lt;Function&gt;
                                    &lt;FunctionName&gt;In&lt;/FunctionName&gt;
                                    &lt;Arguments&gt;
                                      &lt;Expression&gt;
                                        &lt;AttributeRef&gt;
                                          &lt;!--String 02--&gt;
                                          &lt;AttributeID&gt;Ge94da650-87be-438d-889d-d9584df072ce&lt;/AttributeID&gt;
                                        &lt;/AttributeRef&gt;
                                      &lt;/Expression&gt;
                                      &lt;Expression&gt;
                                        &lt;Literal&gt;
                                          &lt;DataType&gt;String&lt;/DataType&gt;
                                          &lt;Values&gt;
                                            &lt;Value&gt;2&lt;/Value&gt;
                                            &lt;Value&gt;10&lt;/Value&gt;
                                          &lt;/Values&gt;
                                        &lt;/Literal&gt;
                                      &lt;/Expression&gt;
                                    &lt;/Arguments&gt;
                                  &lt;/Function&gt;
                                  &lt;CustomProperties&gt;
                                    &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                                  &lt;/CustomProperties&gt;
                                &lt;/Expression&gt;
                              &lt;/Arguments&gt;
                            &lt;/Function&gt;
                          &lt;/Expression&gt;
                        &lt;/Arguments&gt;
                      &lt;/Function&gt;
                    &lt;/Expression&gt;
                  &lt;/Arguments&gt;
                &lt;/Function&gt;
              &lt;/Expression&gt;
            &lt;/Arguments&gt;
          &lt;/Function&gt;
          &lt;CustomProperties&gt;
            &lt;CustomProperty Name="qd:Filter" /&gt;
            &lt;CustomProperty Name="qd:ContextEntityID"&gt;
              &lt;Value xsi:type="xsd:string"&gt;G84916cb4-85b5-4a29-97cf-249b0b43b9f4&lt;/Value&gt;
            &lt;/CustomProperty&gt;
            &lt;CustomProperty Name="qd:AutoChangeBaseEntity" /&gt;
            &lt;CustomProperty Name="qd:Design"&gt;
              &lt;Value xsi:type="xsd:string"&gt;expr2&lt;/Value&gt;
            &lt;/CustomProperty&gt;
          &lt;/CustomProperties&gt;
        &lt;/Expression&gt;
      &lt;/Filter&gt;
    &lt;/Hierarchy&gt;
  &lt;/Hierarchies&gt;
  &lt;Parameters&gt;
    &lt;Parameter Name="Logon Time"&gt;
      &lt;DataType&gt;DateTime&lt;/DataType&gt;
      &lt;Nullable&gt;true&lt;/Nullable&gt;
    &lt;/Parameter&gt;
    &lt;Parameter Name="Logon Time1"&gt;
      &lt;DataType&gt;DateTime&lt;/DataType&gt;
      &lt;Nullable&gt;true&lt;/Nullable&gt;
    &lt;/Parameter&gt;
  &lt;/Parameters&gt;
&lt;/SemanticQuery&gt;</CommandText>
      </Query>
      <Fields>
        <Field Name="Logon_Time">
          <DataField>Logon Time</DataField>
          <rd:TypeName>System.DateTime</rd:TypeName>
        </Field>
        <Field Name="Target_User">
          <DataField>Target User</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Event_Machine">
          <DataField>Event Machine</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Logon_Type">
          <DataField>Logon Type</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Client_Address">
          <DataField>Client Address</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Event_Id">
          <DataField>Event Id</DataField>
          <rd:TypeName>System.Int64</rd:TypeName>
        </Field>
      </Fields>
    </DataSet>
    <DataSet Name="DataSet2">
      <Query>
        <DataSourceName>Audit</DataSourceName>
        <QueryParameters>
          <QueryParameter Name="Logon Time">
            <Value>=Parameters!Logon_Time.Value</Value>
          </QueryParameter>
          <QueryParameter Name="Logon Time1">
            <Value>=Parameters!Logon_Time1.Value</Value>
          </QueryParameter>
        </QueryParameters>
        <CommandText>&lt;SemanticQuery xmlns="http://schemas.microsoft.com/sqlserver/2004/10/semanticmodeling" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:qd="http://schemas.microsoft.com/sqlserver/2004/11/semanticquerydesign" xmlns:rb="http://schemas.microsoft.com/sqlserver/2004/11/reportbuilder"&gt;
  &lt;Hierarchies&gt;
    &lt;Hierarchy&gt;
      &lt;BaseEntity&gt;
        &lt;!--Audit Data--&gt;
        &lt;EntityID&gt;G84916cb4-85b5-4a29-97cf-249b0b43b9f4&lt;/EntityID&gt;
      &lt;/BaseEntity&gt;
      &lt;Groupings&gt;
        &lt;Grouping Name="Logon Time"&gt;
          &lt;Expression Name="Logon Time"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Logon Time--&gt;
              &lt;AttributeID&gt;G432cfb7f-4dce-4e31-8aaf-5db534bdec6d&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Target User"&gt;
          &lt;Expression Name="Target User"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Primary User--&gt;
              &lt;AttributeID&gt;G76697799-fe6c-40cf-b52b-4ebb034177f0&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Event Machine"&gt;
          &lt;Expression Name="Event Machine"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Event Machine--&gt;
              &lt;AttributeID&gt;Gd81289ed-1b2f-4914-973e-ae952739341f&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Logon Type"&gt;
          &lt;Expression Name="Logon Type"&gt;
            &lt;AttributeRef&gt;
              &lt;!--String 01--&gt;
              &lt;AttributeID&gt;Gda80c798-aa22-4ddc-97db-7f7c8deb9e43&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Client Address"&gt;
          &lt;Expression Name="Client Address"&gt;
            &lt;AttributeRef&gt;
              &lt;!--String 02--&gt;
              &lt;AttributeID&gt;Ge94da650-87be-438d-889d-d9584df072ce&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
        &lt;Grouping Name="Event Id"&gt;
          &lt;Expression Name="Event Id"&gt;
            &lt;AttributeRef&gt;
              &lt;!--Event Id--&gt;
              &lt;AttributeID&gt;G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419&lt;/AttributeID&gt;
            &lt;/AttributeRef&gt;
          &lt;/Expression&gt;
        &lt;/Grouping&gt;
      &lt;/Groupings&gt;
      &lt;Filter&gt;
        &lt;Expression Name="expr1"&gt;
          &lt;Function&gt;
            &lt;FunctionName&gt;And&lt;/FunctionName&gt;
            &lt;Arguments&gt;
              &lt;Expression&gt;
                &lt;Function&gt;
                  &lt;FunctionName&gt;GreaterThanOrEquals&lt;/FunctionName&gt;
                  &lt;Arguments&gt;
                    &lt;Expression&gt;
                      &lt;AttributeRef&gt;
                        &lt;!--Logon Time--&gt;
                        &lt;AttributeID&gt;G432cfb7f-4dce-4e31-8aaf-5db534bdec6d&lt;/AttributeID&gt;
                      &lt;/AttributeRef&gt;
                    &lt;/Expression&gt;
                    &lt;Expression&gt;
                      &lt;ParameterRef&gt;
                        &lt;ParameterName&gt;Logon Time&lt;/ParameterName&gt;
                      &lt;/ParameterRef&gt;
                    &lt;/Expression&gt;
                  &lt;/Arguments&gt;
                &lt;/Function&gt;
                &lt;CustomProperties&gt;
                  &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                &lt;/CustomProperties&gt;
              &lt;/Expression&gt;
              &lt;Expression&gt;
                &lt;Function&gt;
                  &lt;FunctionName&gt;And&lt;/FunctionName&gt;
                  &lt;Arguments&gt;
                    &lt;Expression&gt;
                      &lt;Function&gt;
                        &lt;FunctionName&gt;LessThanOrEquals&lt;/FunctionName&gt;
                        &lt;Arguments&gt;
                          &lt;Expression&gt;
                            &lt;AttributeRef&gt;
                              &lt;!--Logon Time--&gt;
                              &lt;AttributeID&gt;G432cfb7f-4dce-4e31-8aaf-5db534bdec6d&lt;/AttributeID&gt;
                            &lt;/AttributeRef&gt;
                          &lt;/Expression&gt;
                          &lt;Expression&gt;
                            &lt;ParameterRef&gt;
                              &lt;ParameterName&gt;Logon Time1&lt;/ParameterName&gt;
                            &lt;/ParameterRef&gt;
                          &lt;/Expression&gt;
                        &lt;/Arguments&gt;
                      &lt;/Function&gt;
                      &lt;CustomProperties&gt;
                        &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                      &lt;/CustomProperties&gt;
                    &lt;/Expression&gt;
                    &lt;Expression&gt;
                      &lt;Function&gt;
                        &lt;FunctionName&gt;Equals&lt;/FunctionName&gt;
                        &lt;Arguments&gt;
                          &lt;Expression&gt;
                            &lt;AttributeRef&gt;
                              &lt;!--Event Id--&gt;
                              &lt;AttributeID&gt;G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419&lt;/AttributeID&gt;
                            &lt;/AttributeRef&gt;
                          &lt;/Expression&gt;
                          &lt;Expression&gt;
                            &lt;Literal&gt;
                              &lt;DataType&gt;Integer&lt;/DataType&gt;
                              &lt;Value&gt;4778&lt;/Value&gt;
                            &lt;/Literal&gt;
                          &lt;/Expression&gt;
                        &lt;/Arguments&gt;
                      &lt;/Function&gt;
                      &lt;CustomProperties&gt;
                        &lt;CustomProperty Name="qd:FilterCondition" /&gt;
                      &lt;/CustomProperties&gt;
                    &lt;/Expression&gt;
                  &lt;/Arguments&gt;
                &lt;/Function&gt;
              &lt;/Expression&gt;
            &lt;/Arguments&gt;
          &lt;/Function&gt;
          &lt;CustomProperties&gt;
            &lt;CustomProperty Name="qd:Filter" /&gt;
            &lt;CustomProperty Name="qd:ContextEntityID"&gt;
              &lt;Value xsi:type="xsd:string"&gt;G84916cb4-85b5-4a29-97cf-249b0b43b9f4&lt;/Value&gt;
            &lt;/CustomProperty&gt;
            &lt;CustomProperty Name="qd:AutoChangeBaseEntity" /&gt;
            &lt;CustomProperty Name="qd:Design"&gt;
              &lt;Value xsi:type="xsd:string"&gt;expr2&lt;/Value&gt;
            &lt;/CustomProperty&gt;
          &lt;/CustomProperties&gt;
        &lt;/Expression&gt;
      &lt;/Filter&gt;
    &lt;/Hierarchy&gt;
  &lt;/Hierarchies&gt;
  &lt;Parameters&gt;
    &lt;Parameter Name="Logon Time"&gt;
      &lt;DataType&gt;DateTime&lt;/DataType&gt;
      &lt;Nullable&gt;true&lt;/Nullable&gt;
    &lt;/Parameter&gt;
    &lt;Parameter Name="Logon Time1"&gt;
      &lt;DataType&gt;DateTime&lt;/DataType&gt;
      &lt;Nullable&gt;true&lt;/Nullable&gt;
    &lt;/Parameter&gt;
  &lt;/Parameters&gt;
&lt;/SemanticQuery&gt;</CommandText>
      </Query>
      <Fields>
        <Field Name="Logon_Time">
          <DataField>Logon Time</DataField>
          <rd:TypeName>System.DateTime</rd:TypeName>
        </Field>
        <Field Name="Target_User">
          <DataField>Target User</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Event_Machine">
          <DataField>Event Machine</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Logon_Type">
          <DataField>Logon Type</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Client_Address">
          <DataField>Client Address</DataField>
          <rd:TypeName>System.String</rd:TypeName>
        </Field>
        <Field Name="Event_Id">
          <DataField>Event Id</DataField>
          <rd:TypeName>System.Int64</rd:TypeName>
        </Field>
      </Fields>
    </DataSet>
  </DataSets>
  <ReportSections>
    <ReportSection>
      <Body>
        <ReportItems>
          <Tablix Name="Tablix1">
            <TablixBody>
              <TablixColumns>
                <TablixColumn>
                  <Width>1in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>1in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>2.36458in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>0.77083in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>1.36458in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>0.66667in</Width>
                </TablixColumn>
              </TablixColumns>
              <TablixRows>
                <TablixRow>
                  <Height>0.25in</Height>
                  <TablixCells>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Logon Time</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox2</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox3">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Target User</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox3</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox5">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Event Machine</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox5</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox7">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Logon Type</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox7</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox9">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Client Address</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox9</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox11">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Event Id</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox11</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                  </TablixCells>
                </TablixRow>
                <TablixRow>
                  <Height>0.25in</Height>
                  <TablixCells>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Logon_Time">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Logon_Time.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Logon_Time</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Target_User">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Target_User.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Target_User</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Event_Machine">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Event_Machine.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Event_Machine</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Logon_Type">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Logon_Type.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Logon_Type</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Client_Address">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Client_Address.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Client_Address</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Event_Id">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Sum(Fields!Event_Id.Value)</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Event_Id</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                  </TablixCells>
                </TablixRow>
              </TablixRows>
            </TablixBody>
            <TablixColumnHierarchy>
              <TablixMembers>
                <TablixMember />
                <TablixMember />
                <TablixMember />
                <TablixMember />
                <TablixMember />
                <TablixMember />
              </TablixMembers>
            </TablixColumnHierarchy>
            <TablixRowHierarchy>
              <TablixMembers>
                <TablixMember>
                  <KeepWithGroup>After</KeepWithGroup>
                </TablixMember>
                <TablixMember>
                  <Group Name="Details" />
                </TablixMember>
              </TablixMembers>
            </TablixRowHierarchy>
            <DataSetName>DataSet1</DataSetName>
            <Top>0.4in</Top>
            <Height>0.5in</Height>
            <Width>7.16666in</Width>
            <Style>
              <Border>
                <Style>None</Style>
              </Border>
            </Style>
          </Tablix>
          <Textbox Name="ReportTitle">
            <CanGrow>true</CanGrow>
            <KeepTogether>true</KeepTogether>
            <Paragraphs>
              <Paragraph>
                <TextRuns>
                  <TextRun>
                    <Value />
                    <Style>
                      <FontFamily>Verdana</FontFamily>
                      <FontSize>20pt</FontSize>
                    </Style>
                  </TextRun>
                </TextRuns>
                <Style />
              </Paragraph>
            </Paragraphs>
            <rd:WatermarkTextbox>Title</rd:WatermarkTextbox>
            <rd:DefaultName>ReportTitle</rd:DefaultName>
            <Height>0.4in</Height>
            <Width>5.5in</Width>
            <ZIndex>1</ZIndex>
            <Style>
              <Border>
                <Style>None</Style>
              </Border>
              <PaddingLeft>2pt</PaddingLeft>
              <PaddingRight>2pt</PaddingRight>
              <PaddingTop>2pt</PaddingTop>
              <PaddingBottom>2pt</PaddingBottom>
            </Style>
          </Textbox>
          <Tablix Name="Tablix2">
            <TablixBody>
              <TablixColumns>
                <TablixColumn>
                  <Width>1in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>1in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>2.36458in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>0.77083in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>1.36458in</Width>
                </TablixColumn>
                <TablixColumn>
                  <Width>0.66667in</Width>
                </TablixColumn>
              </TablixColumns>
              <TablixRows>
                <TablixRow>
                  <Height>0.25in</Height>
                  <TablixCells>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox4">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Logon Time</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox2</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox6">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Target User</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox3</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox8">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Event Machine</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox5</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox10">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Logon Type</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox7</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox12">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Client Address</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox9</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Textbox13">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>Event Id</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                    <FontWeight>Bold</FontWeight>
                                    <Color>White</Color>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Textbox11</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#869286</Color>
                              <Style>Solid</Style>
                            </Border>
                            <BackgroundColor>#708270</BackgroundColor>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                  </TablixCells>
                </TablixRow>
                <TablixRow>
                  <Height>0.25in</Height>
                  <TablixCells>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Logon_Time2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Logon_Time.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Logon_Time</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Target_User2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Target_User.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Target_User</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Event_Machine2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Event_Machine.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Event_Machine</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Logon_Type2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Logon_Type.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Logon_Type</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Client_Address2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Client_Address.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Client_Address</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                    <TablixCell>
                      <CellContents>
                        <Textbox Name="Event_Id2">
                          <CanGrow>true</CanGrow>
                          <KeepTogether>true</KeepTogether>
                          <Paragraphs>
                            <Paragraph>
                              <TextRuns>
                                <TextRun>
                                  <Value>=Fields!Event_Id.Value</Value>
                                  <Style>
                                    <FontFamily>Times New Roman</FontFamily>
                                    <FontSize>11pt</FontSize>
                                  </Style>
                                </TextRun>
                              </TextRuns>
                              <Style />
                            </Paragraph>
                          </Paragraphs>
                          <rd:DefaultName>Event_Id</rd:DefaultName>
                          <Style>
                            <Border>
                              <Color>#e5e5e5</Color>
                              <Style>Solid</Style>
                            </Border>
                            <PaddingLeft>2pt</PaddingLeft>
                            <PaddingRight>2pt</PaddingRight>
                            <PaddingTop>2pt</PaddingTop>
                            <PaddingBottom>2pt</PaddingBottom>
                          </Style>
                        </Textbox>
                      </CellContents>
                    </TablixCell>
                  </TablixCells>
                </TablixRow>
              </TablixRows>
            </TablixBody>
            <TablixColumnHierarchy>
              <TablixMembers>
                <TablixMember />
                <TablixMember />
                <TablixMember />
                <TablixMember />
                <TablixMember />
                <TablixMember />
              </TablixMembers>
            </TablixColumnHierarchy>
            <TablixRowHierarchy>
              <TablixMembers>
                <TablixMember>
                  <KeepWithGroup>After</KeepWithGroup>
                </TablixMember>
                <TablixMember>
                  <Group Name="Details2" />
                </TablixMember>
              </TablixMembers>
            </TablixRowHierarchy>
            <DataSetName>DataSet2</DataSetName>
            <Top>0.875in</Top>
            <Left>0.00001in</Left>
            <Height>0.5in</Height>
            <Width>7.16666in</Width>
            <ZIndex>2</ZIndex>
            <Style>
              <Border>
                <Style>None</Style>
              </Border>
            </Style>
          </Tablix>
        </ReportItems>
        <Height>2.25in</Height>
        <Style>
          <Border>
            <Style>None</Style>
          </Border>
        </Style>
      </Body>
      <Width>7.16667in</Width>
      <Page>
        <PageFooter>
          <Height>0.45in</Height>
          <PrintOnFirstPage>true</PrintOnFirstPage>
          <PrintOnLastPage>true</PrintOnLastPage>
          <ReportItems>
            <Textbox Name="ExecutionTime">
              <CanGrow>true</CanGrow>
              <KeepTogether>true</KeepTogether>
              <Paragraphs>
                <Paragraph>
                  <TextRuns>
                    <TextRun>
                      <Value>=Globals!ExecutionTime</Value>
                      <Style />
                    </TextRun>
                  </TextRuns>
                  <Style>
                    <TextAlign>Right</TextAlign>
                  </Style>
                </Paragraph>
              </Paragraphs>
              <rd:DefaultName>ExecutionTime</rd:DefaultName>
              <Top>0.2in</Top>
              <Left>4in</Left>
              <Height>0.25in</Height>
              <Width>2in</Width>
              <Style>
                <Border>
                  <Style>None</Style>
                </Border>
                <PaddingLeft>2pt</PaddingLeft>
                <PaddingRight>2pt</PaddingRight>
                <PaddingTop>2pt</PaddingTop>
                <PaddingBottom>2pt</PaddingBottom>
              </Style>
            </Textbox>
          </ReportItems>
          <Style>
            <Border>
              <Style>None</Style>
            </Border>
          </Style>
        </PageFooter>
        <LeftMargin>1in</LeftMargin>
        <RightMargin>1in</RightMargin>
        <TopMargin>1in</TopMargin>
        <BottomMargin>1in</BottomMargin>
        <Style />
      </Page>
    </ReportSection>
  </ReportSections>
  <ReportParameters>
    <ReportParameter Name="DateFrom">
      <DataType>DateTime</DataType>
      <Nullable>true</Nullable>
      <DefaultValue>
        <Values>
          <Value>=DateAdd("d",-1,Today())</Value>
        </Values>
      </DefaultValue>
      <Prompt>DateFrom</Prompt>
      <Hidden>true</Hidden>
    </ReportParameter>
    <ReportParameter Name="DateTo">
      <DataType>DateTime</DataType>
      <Nullable>true</Nullable>
      <DefaultValue>
        <Values>
          <Value>=Now()</Value>
        </Values>
      </DefaultValue>
      <Prompt>DateTo</Prompt>
      <Hidden>true</Hidden>
    </ReportParameter>
    <ReportParameter Name="Logon_Time">
      <DataType>DateTime</DataType>
      <DefaultValue>
        <Values>
          <Value>=DateAdd("d",-1,Today())</Value>
        </Values>
      </DefaultValue>
      <Prompt>From Date</Prompt>
    </ReportParameter>
    <ReportParameter Name="Logon_Time1">
      <DataType>DateTime</DataType>
      <Prompt>To Date</Prompt>
    </ReportParameter>
  </ReportParameters>
  <rd:ReportUnitType>Inch</rd:ReportUnitType>
  <rd:ReportServerUrl>http://serverview/ReportServer_SCOM</rd:ReportServerUrl>
  <rd:ReportID>074b004a-2060-48ff-976a-0ee2e47a9303</rd:ReportID>
</Report>

5 comments:

  1. Okay so i'm trying to understand your reporting code a little better. I'm not understanding something which is 0136229f-a3cb-4df7-a401-fbadf2ae2cb5 for your DataSourceID and for <AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID> those values look like SQL table names is that the case here??
    If so how is it that you have the ability to see Audit Collection Services tables in order for you to get those table names?
    When setting up SCOM 2012 which database that we created has to Audit Data stored to it?
    I cant seem to find it thats kind of main question since those values for DatasourceID and AttributeID look like Table names in SQL i was hoping you could point me to where all the Audit Data is being stored?

    ReplyDelete
    Replies
    1. In the database you specified when installing ACS. By default: OperationsManagerAC.

      Delete
  2. I'm getting the error "Query execution failed for dataset 'dataset1' Incorrect syntax near 'datetime'. The label 'xmlns' has already been declared. label names must be unique within a query batch or stored procedure."

    Also is it possible to add a computer name paremeter to the report so i dont get all logons for all servers?

    ReplyDelete
  3. Question for you about your report. I need to create a weekly report of user logons based on particular security groups in AD. I have the powershell script to extract the users and create an array of names, how could I embed that script in your report and create this report using just the users in that array?

    ReplyDelete