This is a report I created for the Audit Collection Services of System Center Operations Manager that lists all successful user logons details in all servers.
The report only requires start and end date parameters to run.
Event ID 4624 indicates a successful logon event on the local computer. Logon Type 10 means a remote interactive logon and the client IP address will show while Logon Type 2 means a local logon from the system console.
Event ID 4778 means a user has reconnected to an existing session in which case the Logon Type field will show the session ID.
Please note that these Event IDs have been introduced in Windows Server 2008/Vista, so the reports works only with these OSes or higher, it will not work with Windows Server 2003/XP.
To deploy the report, save the xml at the bottom as UserLogon.rdl then run the Report Builder from the Report Manager website
Click Open and browse to the report rdl file.
Verify the data source is OK
Feel free to customize it as per your likings, then save it to the ACS "Audit Reports" folder.
I have tested it on SCOM 2007 R2 and SCOM 2012.
Start copy below
<?xml version="1.0" encoding="utf-8"?>
<Report xmlns:rd="http://schemas.microsoft.com/SQLServer/reporting/reportdesigner" xmlns:cl="http://schemas.microsoft.com/sqlserver/reporting/2010/01/componentdefinition" xmlns="http://schemas.microsoft.com/sqlserver/reporting/2010/01/reportdefinition">
<AutoRefresh>0</AutoRefresh>
<DataSources>
<DataSource Name="Audit">
<DataSourceReference>/Audit Reports/Audit</DataSourceReference>
<rd:SecurityType>None</rd:SecurityType>
<rd:DataSourceID>0136229f-a3cb-4df7-a401-fbadf2ae2cb5</rd:DataSourceID>
</DataSource>
</DataSources>
<DataSets>
<DataSet Name="DataSet1">
<Query>
<DataSourceName>Audit</DataSourceName>
<QueryParameters>
<QueryParameter Name="Logon Time">
<Value>=Parameters!Logon_Time.Value</Value>
</QueryParameter>
<QueryParameter Name="Logon Time1">
<Value>=Parameters!Logon_Time1.Value</Value>
</QueryParameter>
</QueryParameters>
<CommandText><SemanticQuery xmlns="http://schemas.microsoft.com/sqlserver/2004/10/semanticmodeling" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:qd="http://schemas.microsoft.com/sqlserver/2004/11/semanticquerydesign" xmlns:rb="http://schemas.microsoft.com/sqlserver/2004/11/reportbuilder">
<Hierarchies>
<Hierarchy>
<BaseEntity>
<!--Audit Data-->
<EntityID>G84916cb4-85b5-4a29-97cf-249b0b43b9f4</EntityID>
</BaseEntity>
<Groupings>
<Grouping Name="Logon Time">
<Expression Name="Logon Time">
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Target User">
<Expression Name="Target User">
<AttributeRef>
<!--Target User-->
<AttributeID>Gd2278cd8-ca70-448a-b39b-e08854e5aa1a</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Machine">
<Expression Name="Event Machine">
<AttributeRef>
<!--Event Machine-->
<AttributeID>Gd81289ed-1b2f-4914-973e-ae952739341f</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Logon Type">
<Expression Name="Logon Type">
<AttributeRef>
<!--String 02-->
<AttributeID>Ge94da650-87be-438d-889d-d9584df072ce</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Client Address">
<Expression Name="Client Address">
<AttributeRef>
<!--String 03-->
<AttributeID>G9b3954f6-b6e3-484c-aa18-93e4a1dbef9a</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Id">
<Expression Name="Event Id">
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
</Groupings>
<Filter>
<Expression Name="expr1">
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>GreaterThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>LessThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time1</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>In</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>Integer</DataType>
<Values>
<Value>4778</Value>
<Value>4624</Value>
</Values>
</Literal>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>Not</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>NotEquals</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>Find</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Target User-->
<AttributeID>Gd2278cd8-ca70-448a-b39b-e08854e5aa1a</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>String</DataType>
<Value>$</Value>
</Literal>
</Expression>
</Arguments>
</Function>
</Expression>
<Expression>
<Literal>
<DataType>Integer</DataType>
<Value>0</Value>
</Literal>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>In</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--String 02-->
<AttributeID>Ge94da650-87be-438d-889d-d9584df072ce</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>String</DataType>
<Values>
<Value>2</Value>
<Value>10</Value>
</Values>
</Literal>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:Filter" />
<CustomProperty Name="qd:ContextEntityID">
<Value xsi:type="xsd:string">G84916cb4-85b5-4a29-97cf-249b0b43b9f4</Value>
</CustomProperty>
<CustomProperty Name="qd:AutoChangeBaseEntity" />
<CustomProperty Name="qd:Design">
<Value xsi:type="xsd:string">expr2</Value>
</CustomProperty>
</CustomProperties>
</Expression>
</Filter>
</Hierarchy>
</Hierarchies>
<Parameters>
<Parameter Name="Logon Time">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
<Parameter Name="Logon Time1">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
</Parameters>
</SemanticQuery></CommandText>
</Query>
<Fields>
<Field Name="Logon_Time">
<DataField>Logon Time</DataField>
<rd:TypeName>System.DateTime</rd:TypeName>
</Field>
<Field Name="Target_User">
<DataField>Target User</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Machine">
<DataField>Event Machine</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Logon_Type">
<DataField>Logon Type</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Client_Address">
<DataField>Client Address</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Id">
<DataField>Event Id</DataField>
<rd:TypeName>System.Int64</rd:TypeName>
</Field>
</Fields>
</DataSet>
<DataSet Name="DataSet2">
<Query>
<DataSourceName>Audit</DataSourceName>
<QueryParameters>
<QueryParameter Name="Logon Time">
<Value>=Parameters!Logon_Time.Value</Value>
</QueryParameter>
<QueryParameter Name="Logon Time1">
<Value>=Parameters!Logon_Time1.Value</Value>
</QueryParameter>
</QueryParameters>
<CommandText><SemanticQuery xmlns="http://schemas.microsoft.com/sqlserver/2004/10/semanticmodeling" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:qd="http://schemas.microsoft.com/sqlserver/2004/11/semanticquerydesign" xmlns:rb="http://schemas.microsoft.com/sqlserver/2004/11/reportbuilder">
<Hierarchies>
<Hierarchy>
<BaseEntity>
<!--Audit Data-->
<EntityID>G84916cb4-85b5-4a29-97cf-249b0b43b9f4</EntityID>
</BaseEntity>
<Groupings>
<Grouping Name="Logon Time">
<Expression Name="Logon Time">
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Target User">
<Expression Name="Target User">
<AttributeRef>
<!--Primary User-->
<AttributeID>G76697799-fe6c-40cf-b52b-4ebb034177f0</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Machine">
<Expression Name="Event Machine">
<AttributeRef>
<!--Event Machine-->
<AttributeID>Gd81289ed-1b2f-4914-973e-ae952739341f</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Logon Type">
<Expression Name="Logon Type">
<AttributeRef>
<!--String 01-->
<AttributeID>Gda80c798-aa22-4ddc-97db-7f7c8deb9e43</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Client Address">
<Expression Name="Client Address">
<AttributeRef>
<!--String 02-->
<AttributeID>Ge94da650-87be-438d-889d-d9584df072ce</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Id">
<Expression Name="Event Id">
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
</Groupings>
<Filter>
<Expression Name="expr1">
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>GreaterThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>LessThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time1</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>Equals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>Integer</DataType>
<Value>4778</Value>
</Literal>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:Filter" />
<CustomProperty Name="qd:ContextEntityID">
<Value xsi:type="xsd:string">G84916cb4-85b5-4a29-97cf-249b0b43b9f4</Value>
</CustomProperty>
<CustomProperty Name="qd:AutoChangeBaseEntity" />
<CustomProperty Name="qd:Design">
<Value xsi:type="xsd:string">expr2</Value>
</CustomProperty>
</CustomProperties>
</Expression>
</Filter>
</Hierarchy>
</Hierarchies>
<Parameters>
<Parameter Name="Logon Time">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
<Parameter Name="Logon Time1">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
</Parameters>
</SemanticQuery></CommandText>
</Query>
<Fields>
<Field Name="Logon_Time">
<DataField>Logon Time</DataField>
<rd:TypeName>System.DateTime</rd:TypeName>
</Field>
<Field Name="Target_User">
<DataField>Target User</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Machine">
<DataField>Event Machine</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Logon_Type">
<DataField>Logon Type</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Client_Address">
<DataField>Client Address</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Id">
<DataField>Event Id</DataField>
<rd:TypeName>System.Int64</rd:TypeName>
</Field>
</Fields>
</DataSet>
</DataSets>
<ReportSections>
<ReportSection>
<Body>
<ReportItems>
<Tablix Name="Tablix1">
<TablixBody>
<TablixColumns>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>2.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.77083in</Width>
</TablixColumn>
<TablixColumn>
<Width>1.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.66667in</Width>
</TablixColumn>
</TablixColumns>
<TablixRows>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Textbox2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Time</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox2</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox3">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Target User</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox3</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox5">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Machine</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox5</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox7">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Type</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox7</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox9">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Client Address</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox9</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox11">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Id</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox11</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Time">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Time.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Time</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Target_User">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Target_User.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Target_User</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Machine">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Event_Machine.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Machine</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Type">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Type.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Type</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Client_Address">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Client_Address.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Client_Address</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Id">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Sum(Fields!Event_Id.Value)</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Id</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
</TablixRows>
</TablixBody>
<TablixColumnHierarchy>
<TablixMembers>
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
</TablixMembers>
</TablixColumnHierarchy>
<TablixRowHierarchy>
<TablixMembers>
<TablixMember>
<KeepWithGroup>After</KeepWithGroup>
</TablixMember>
<TablixMember>
<Group Name="Details" />
</TablixMember>
</TablixMembers>
</TablixRowHierarchy>
<DataSetName>DataSet1</DataSetName>
<Top>0.4in</Top>
<Height>0.5in</Height>
<Width>7.16666in</Width>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</Tablix>
<Textbox Name="ReportTitle">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value />
<Style>
<FontFamily>Verdana</FontFamily>
<FontSize>20pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:WatermarkTextbox>Title</rd:WatermarkTextbox>
<rd:DefaultName>ReportTitle</rd:DefaultName>
<Height>0.4in</Height>
<Width>5.5in</Width>
<ZIndex>1</ZIndex>
<Style>
<Border>
<Style>None</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
<Tablix Name="Tablix2">
<TablixBody>
<TablixColumns>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>2.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.77083in</Width>
</TablixColumn>
<TablixColumn>
<Width>1.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.66667in</Width>
</TablixColumn>
</TablixColumns>
<TablixRows>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Textbox4">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Time</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox2</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox6">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Target User</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox3</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox8">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Machine</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox5</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox10">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Type</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox7</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox12">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Client Address</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox9</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox13">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Id</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox11</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Time2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Time.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Time</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Target_User2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Target_User.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Target_User</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Machine2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Event_Machine.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Machine</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Type2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Type.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Type</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Client_Address2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Client_Address.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Client_Address</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Id2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Event_Id.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Id</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
</TablixRows>
</TablixBody>
<TablixColumnHierarchy>
<TablixMembers>
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
</TablixMembers>
</TablixColumnHierarchy>
<TablixRowHierarchy>
<TablixMembers>
<TablixMember>
<KeepWithGroup>After</KeepWithGroup>
</TablixMember>
<TablixMember>
<Group Name="Details2" />
</TablixMember>
</TablixMembers>
</TablixRowHierarchy>
<DataSetName>DataSet2</DataSetName>
<Top>0.875in</Top>
<Left>0.00001in</Left>
<Height>0.5in</Height>
<Width>7.16666in</Width>
<ZIndex>2</ZIndex>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</Tablix>
</ReportItems>
<Height>2.25in</Height>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</Body>
<Width>7.16667in</Width>
<Page>
<PageFooter>
<Height>0.45in</Height>
<PrintOnFirstPage>true</PrintOnFirstPage>
<PrintOnLastPage>true</PrintOnLastPage>
<ReportItems>
<Textbox Name="ExecutionTime">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Globals!ExecutionTime</Value>
<Style />
</TextRun>
</TextRuns>
<Style>
<TextAlign>Right</TextAlign>
</Style>
</Paragraph>
</Paragraphs>
<rd:DefaultName>ExecutionTime</rd:DefaultName>
<Top>0.2in</Top>
<Left>4in</Left>
<Height>0.25in</Height>
<Width>2in</Width>
<Style>
<Border>
<Style>None</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</ReportItems>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</PageFooter>
<LeftMargin>1in</LeftMargin>
<RightMargin>1in</RightMargin>
<TopMargin>1in</TopMargin>
<BottomMargin>1in</BottomMargin>
<Style />
</Page>
</ReportSection>
</ReportSections>
<ReportParameters>
<ReportParameter Name="DateFrom">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
<DefaultValue>
<Values>
<Value>=DateAdd("d",-1,Today())</Value>
</Values>
</DefaultValue>
<Prompt>DateFrom</Prompt>
<Hidden>true</Hidden>
</ReportParameter>
<ReportParameter Name="DateTo">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
<DefaultValue>
<Values>
<Value>=Now()</Value>
</Values>
</DefaultValue>
<Prompt>DateTo</Prompt>
<Hidden>true</Hidden>
</ReportParameter>
<ReportParameter Name="Logon_Time">
<DataType>DateTime</DataType>
<DefaultValue>
<Values>
<Value>=DateAdd("d",-1,Today())</Value>
</Values>
</DefaultValue>
<Prompt>From Date</Prompt>
</ReportParameter>
<ReportParameter Name="Logon_Time1">
<DataType>DateTime</DataType>
<Prompt>To Date</Prompt>
</ReportParameter>
</ReportParameters>
<rd:ReportUnitType>Inch</rd:ReportUnitType>
<rd:ReportServerUrl>http://serverview/ReportServer_SCOM</rd:ReportServerUrl>
<rd:ReportID>074b004a-2060-48ff-976a-0ee2e47a9303</rd:ReportID>
</Report>
The report only requires start and end date parameters to run.
Event ID 4624 indicates a successful logon event on the local computer. Logon Type 10 means a remote interactive logon and the client IP address will show while Logon Type 2 means a local logon from the system console.
Event ID 4778 means a user has reconnected to an existing session in which case the Logon Type field will show the session ID.
Please note that these Event IDs have been introduced in Windows Server 2008/Vista, so the reports works only with these OSes or higher, it will not work with Windows Server 2003/XP.
To deploy the report, save the xml at the bottom as UserLogon.rdl then run the Report Builder from the Report Manager website
Click Open and browse to the report rdl file.
Verify the data source is OK
Feel free to customize it as per your likings, then save it to the ACS "Audit Reports" folder.
I have tested it on SCOM 2007 R2 and SCOM 2012.
Start copy below
<?xml version="1.0" encoding="utf-8"?>
<Report xmlns:rd="http://schemas.microsoft.com/SQLServer/reporting/reportdesigner" xmlns:cl="http://schemas.microsoft.com/sqlserver/reporting/2010/01/componentdefinition" xmlns="http://schemas.microsoft.com/sqlserver/reporting/2010/01/reportdefinition">
<AutoRefresh>0</AutoRefresh>
<DataSources>
<DataSource Name="Audit">
<DataSourceReference>/Audit Reports/Audit</DataSourceReference>
<rd:SecurityType>None</rd:SecurityType>
<rd:DataSourceID>0136229f-a3cb-4df7-a401-fbadf2ae2cb5</rd:DataSourceID>
</DataSource>
</DataSources>
<DataSets>
<DataSet Name="DataSet1">
<Query>
<DataSourceName>Audit</DataSourceName>
<QueryParameters>
<QueryParameter Name="Logon Time">
<Value>=Parameters!Logon_Time.Value</Value>
</QueryParameter>
<QueryParameter Name="Logon Time1">
<Value>=Parameters!Logon_Time1.Value</Value>
</QueryParameter>
</QueryParameters>
<CommandText><SemanticQuery xmlns="http://schemas.microsoft.com/sqlserver/2004/10/semanticmodeling" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:qd="http://schemas.microsoft.com/sqlserver/2004/11/semanticquerydesign" xmlns:rb="http://schemas.microsoft.com/sqlserver/2004/11/reportbuilder">
<Hierarchies>
<Hierarchy>
<BaseEntity>
<!--Audit Data-->
<EntityID>G84916cb4-85b5-4a29-97cf-249b0b43b9f4</EntityID>
</BaseEntity>
<Groupings>
<Grouping Name="Logon Time">
<Expression Name="Logon Time">
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Target User">
<Expression Name="Target User">
<AttributeRef>
<!--Target User-->
<AttributeID>Gd2278cd8-ca70-448a-b39b-e08854e5aa1a</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Machine">
<Expression Name="Event Machine">
<AttributeRef>
<!--Event Machine-->
<AttributeID>Gd81289ed-1b2f-4914-973e-ae952739341f</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Logon Type">
<Expression Name="Logon Type">
<AttributeRef>
<!--String 02-->
<AttributeID>Ge94da650-87be-438d-889d-d9584df072ce</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Client Address">
<Expression Name="Client Address">
<AttributeRef>
<!--String 03-->
<AttributeID>G9b3954f6-b6e3-484c-aa18-93e4a1dbef9a</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Id">
<Expression Name="Event Id">
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
</Groupings>
<Filter>
<Expression Name="expr1">
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>GreaterThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>LessThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time1</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>In</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>Integer</DataType>
<Values>
<Value>4778</Value>
<Value>4624</Value>
</Values>
</Literal>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>Not</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>NotEquals</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>Find</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Target User-->
<AttributeID>Gd2278cd8-ca70-448a-b39b-e08854e5aa1a</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>String</DataType>
<Value>$</Value>
</Literal>
</Expression>
</Arguments>
</Function>
</Expression>
<Expression>
<Literal>
<DataType>Integer</DataType>
<Value>0</Value>
</Literal>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>In</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--String 02-->
<AttributeID>Ge94da650-87be-438d-889d-d9584df072ce</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>String</DataType>
<Values>
<Value>2</Value>
<Value>10</Value>
</Values>
</Literal>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:Filter" />
<CustomProperty Name="qd:ContextEntityID">
<Value xsi:type="xsd:string">G84916cb4-85b5-4a29-97cf-249b0b43b9f4</Value>
</CustomProperty>
<CustomProperty Name="qd:AutoChangeBaseEntity" />
<CustomProperty Name="qd:Design">
<Value xsi:type="xsd:string">expr2</Value>
</CustomProperty>
</CustomProperties>
</Expression>
</Filter>
</Hierarchy>
</Hierarchies>
<Parameters>
<Parameter Name="Logon Time">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
<Parameter Name="Logon Time1">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
</Parameters>
</SemanticQuery></CommandText>
</Query>
<Fields>
<Field Name="Logon_Time">
<DataField>Logon Time</DataField>
<rd:TypeName>System.DateTime</rd:TypeName>
</Field>
<Field Name="Target_User">
<DataField>Target User</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Machine">
<DataField>Event Machine</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Logon_Type">
<DataField>Logon Type</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Client_Address">
<DataField>Client Address</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Id">
<DataField>Event Id</DataField>
<rd:TypeName>System.Int64</rd:TypeName>
</Field>
</Fields>
</DataSet>
<DataSet Name="DataSet2">
<Query>
<DataSourceName>Audit</DataSourceName>
<QueryParameters>
<QueryParameter Name="Logon Time">
<Value>=Parameters!Logon_Time.Value</Value>
</QueryParameter>
<QueryParameter Name="Logon Time1">
<Value>=Parameters!Logon_Time1.Value</Value>
</QueryParameter>
</QueryParameters>
<CommandText><SemanticQuery xmlns="http://schemas.microsoft.com/sqlserver/2004/10/semanticmodeling" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:qd="http://schemas.microsoft.com/sqlserver/2004/11/semanticquerydesign" xmlns:rb="http://schemas.microsoft.com/sqlserver/2004/11/reportbuilder">
<Hierarchies>
<Hierarchy>
<BaseEntity>
<!--Audit Data-->
<EntityID>G84916cb4-85b5-4a29-97cf-249b0b43b9f4</EntityID>
</BaseEntity>
<Groupings>
<Grouping Name="Logon Time">
<Expression Name="Logon Time">
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Target User">
<Expression Name="Target User">
<AttributeRef>
<!--Primary User-->
<AttributeID>G76697799-fe6c-40cf-b52b-4ebb034177f0</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Machine">
<Expression Name="Event Machine">
<AttributeRef>
<!--Event Machine-->
<AttributeID>Gd81289ed-1b2f-4914-973e-ae952739341f</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Logon Type">
<Expression Name="Logon Type">
<AttributeRef>
<!--String 01-->
<AttributeID>Gda80c798-aa22-4ddc-97db-7f7c8deb9e43</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Client Address">
<Expression Name="Client Address">
<AttributeRef>
<!--String 02-->
<AttributeID>Ge94da650-87be-438d-889d-d9584df072ce</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
<Grouping Name="Event Id">
<Expression Name="Event Id">
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
</Grouping>
</Groupings>
<Filter>
<Expression Name="expr1">
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>GreaterThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>And</FunctionName>
<Arguments>
<Expression>
<Function>
<FunctionName>LessThanOrEquals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Logon Time-->
<AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<ParameterRef>
<ParameterName>Logon Time1</ParameterName>
</ParameterRef>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
<Expression>
<Function>
<FunctionName>Equals</FunctionName>
<Arguments>
<Expression>
<AttributeRef>
<!--Event Id-->
<AttributeID>G0cf3dc6b-6fde-4030-bb0d-5d25e7f60419</AttributeID>
</AttributeRef>
</Expression>
<Expression>
<Literal>
<DataType>Integer</DataType>
<Value>4778</Value>
</Literal>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:FilterCondition" />
</CustomProperties>
</Expression>
</Arguments>
</Function>
</Expression>
</Arguments>
</Function>
<CustomProperties>
<CustomProperty Name="qd:Filter" />
<CustomProperty Name="qd:ContextEntityID">
<Value xsi:type="xsd:string">G84916cb4-85b5-4a29-97cf-249b0b43b9f4</Value>
</CustomProperty>
<CustomProperty Name="qd:AutoChangeBaseEntity" />
<CustomProperty Name="qd:Design">
<Value xsi:type="xsd:string">expr2</Value>
</CustomProperty>
</CustomProperties>
</Expression>
</Filter>
</Hierarchy>
</Hierarchies>
<Parameters>
<Parameter Name="Logon Time">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
<Parameter Name="Logon Time1">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
</Parameter>
</Parameters>
</SemanticQuery></CommandText>
</Query>
<Fields>
<Field Name="Logon_Time">
<DataField>Logon Time</DataField>
<rd:TypeName>System.DateTime</rd:TypeName>
</Field>
<Field Name="Target_User">
<DataField>Target User</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Machine">
<DataField>Event Machine</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Logon_Type">
<DataField>Logon Type</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Client_Address">
<DataField>Client Address</DataField>
<rd:TypeName>System.String</rd:TypeName>
</Field>
<Field Name="Event_Id">
<DataField>Event Id</DataField>
<rd:TypeName>System.Int64</rd:TypeName>
</Field>
</Fields>
</DataSet>
</DataSets>
<ReportSections>
<ReportSection>
<Body>
<ReportItems>
<Tablix Name="Tablix1">
<TablixBody>
<TablixColumns>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>2.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.77083in</Width>
</TablixColumn>
<TablixColumn>
<Width>1.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.66667in</Width>
</TablixColumn>
</TablixColumns>
<TablixRows>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Textbox2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Time</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox2</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox3">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Target User</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox3</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox5">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Machine</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox5</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox7">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Type</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox7</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox9">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Client Address</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox9</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox11">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Id</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox11</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Time">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Time.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Time</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Target_User">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Target_User.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Target_User</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Machine">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Event_Machine.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Machine</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Type">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Type.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Type</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Client_Address">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Client_Address.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Client_Address</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Id">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Sum(Fields!Event_Id.Value)</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Id</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
</TablixRows>
</TablixBody>
<TablixColumnHierarchy>
<TablixMembers>
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
</TablixMembers>
</TablixColumnHierarchy>
<TablixRowHierarchy>
<TablixMembers>
<TablixMember>
<KeepWithGroup>After</KeepWithGroup>
</TablixMember>
<TablixMember>
<Group Name="Details" />
</TablixMember>
</TablixMembers>
</TablixRowHierarchy>
<DataSetName>DataSet1</DataSetName>
<Top>0.4in</Top>
<Height>0.5in</Height>
<Width>7.16666in</Width>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</Tablix>
<Textbox Name="ReportTitle">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value />
<Style>
<FontFamily>Verdana</FontFamily>
<FontSize>20pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:WatermarkTextbox>Title</rd:WatermarkTextbox>
<rd:DefaultName>ReportTitle</rd:DefaultName>
<Height>0.4in</Height>
<Width>5.5in</Width>
<ZIndex>1</ZIndex>
<Style>
<Border>
<Style>None</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
<Tablix Name="Tablix2">
<TablixBody>
<TablixColumns>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>1in</Width>
</TablixColumn>
<TablixColumn>
<Width>2.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.77083in</Width>
</TablixColumn>
<TablixColumn>
<Width>1.36458in</Width>
</TablixColumn>
<TablixColumn>
<Width>0.66667in</Width>
</TablixColumn>
</TablixColumns>
<TablixRows>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Textbox4">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Time</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox2</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox6">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Target User</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox3</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox8">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Machine</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox5</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox10">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Logon Type</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox7</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox12">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Client Address</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox9</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Textbox13">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>Event Id</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
<FontWeight>Bold</FontWeight>
<Color>White</Color>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Textbox11</rd:DefaultName>
<Style>
<Border>
<Color>#869286</Color>
<Style>Solid</Style>
</Border>
<BackgroundColor>#708270</BackgroundColor>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
<TablixRow>
<Height>0.25in</Height>
<TablixCells>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Time2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Time.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Time</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Target_User2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Target_User.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Target_User</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Machine2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Event_Machine.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Machine</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Logon_Type2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Logon_Type.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Logon_Type</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Client_Address2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Client_Address.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Client_Address</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
<TablixCell>
<CellContents>
<Textbox Name="Event_Id2">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Fields!Event_Id.Value</Value>
<Style>
<FontFamily>Times New Roman</FontFamily>
<FontSize>11pt</FontSize>
</Style>
</TextRun>
</TextRuns>
<Style />
</Paragraph>
</Paragraphs>
<rd:DefaultName>Event_Id</rd:DefaultName>
<Style>
<Border>
<Color>#e5e5e5</Color>
<Style>Solid</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</CellContents>
</TablixCell>
</TablixCells>
</TablixRow>
</TablixRows>
</TablixBody>
<TablixColumnHierarchy>
<TablixMembers>
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
<TablixMember />
</TablixMembers>
</TablixColumnHierarchy>
<TablixRowHierarchy>
<TablixMembers>
<TablixMember>
<KeepWithGroup>After</KeepWithGroup>
</TablixMember>
<TablixMember>
<Group Name="Details2" />
</TablixMember>
</TablixMembers>
</TablixRowHierarchy>
<DataSetName>DataSet2</DataSetName>
<Top>0.875in</Top>
<Left>0.00001in</Left>
<Height>0.5in</Height>
<Width>7.16666in</Width>
<ZIndex>2</ZIndex>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</Tablix>
</ReportItems>
<Height>2.25in</Height>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</Body>
<Width>7.16667in</Width>
<Page>
<PageFooter>
<Height>0.45in</Height>
<PrintOnFirstPage>true</PrintOnFirstPage>
<PrintOnLastPage>true</PrintOnLastPage>
<ReportItems>
<Textbox Name="ExecutionTime">
<CanGrow>true</CanGrow>
<KeepTogether>true</KeepTogether>
<Paragraphs>
<Paragraph>
<TextRuns>
<TextRun>
<Value>=Globals!ExecutionTime</Value>
<Style />
</TextRun>
</TextRuns>
<Style>
<TextAlign>Right</TextAlign>
</Style>
</Paragraph>
</Paragraphs>
<rd:DefaultName>ExecutionTime</rd:DefaultName>
<Top>0.2in</Top>
<Left>4in</Left>
<Height>0.25in</Height>
<Width>2in</Width>
<Style>
<Border>
<Style>None</Style>
</Border>
<PaddingLeft>2pt</PaddingLeft>
<PaddingRight>2pt</PaddingRight>
<PaddingTop>2pt</PaddingTop>
<PaddingBottom>2pt</PaddingBottom>
</Style>
</Textbox>
</ReportItems>
<Style>
<Border>
<Style>None</Style>
</Border>
</Style>
</PageFooter>
<LeftMargin>1in</LeftMargin>
<RightMargin>1in</RightMargin>
<TopMargin>1in</TopMargin>
<BottomMargin>1in</BottomMargin>
<Style />
</Page>
</ReportSection>
</ReportSections>
<ReportParameters>
<ReportParameter Name="DateFrom">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
<DefaultValue>
<Values>
<Value>=DateAdd("d",-1,Today())</Value>
</Values>
</DefaultValue>
<Prompt>DateFrom</Prompt>
<Hidden>true</Hidden>
</ReportParameter>
<ReportParameter Name="DateTo">
<DataType>DateTime</DataType>
<Nullable>true</Nullable>
<DefaultValue>
<Values>
<Value>=Now()</Value>
</Values>
</DefaultValue>
<Prompt>DateTo</Prompt>
<Hidden>true</Hidden>
</ReportParameter>
<ReportParameter Name="Logon_Time">
<DataType>DateTime</DataType>
<DefaultValue>
<Values>
<Value>=DateAdd("d",-1,Today())</Value>
</Values>
</DefaultValue>
<Prompt>From Date</Prompt>
</ReportParameter>
<ReportParameter Name="Logon_Time1">
<DataType>DateTime</DataType>
<Prompt>To Date</Prompt>
</ReportParameter>
</ReportParameters>
<rd:ReportUnitType>Inch</rd:ReportUnitType>
<rd:ReportServerUrl>http://serverview/ReportServer_SCOM</rd:ReportServerUrl>
<rd:ReportID>074b004a-2060-48ff-976a-0ee2e47a9303</rd:ReportID>
</Report>
Okay so i'm trying to understand your reporting code a little better. I'm not understanding something which is 0136229f-a3cb-4df7-a401-fbadf2ae2cb5 for your DataSourceID and for <AttributeID>G432cfb7f-4dce-4e31-8aaf-5db534bdec6d</AttributeID> those values look like SQL table names is that the case here??
ReplyDeleteIf so how is it that you have the ability to see Audit Collection Services tables in order for you to get those table names?
When setting up SCOM 2012 which database that we created has to Audit Data stored to it?
I cant seem to find it thats kind of main question since those values for DatasourceID and AttributeID look like Table names in SQL i was hoping you could point me to where all the Audit Data is being stored?
In the database you specified when installing ACS. By default: OperationsManagerAC.
DeleteI'm getting the error "Query execution failed for dataset 'dataset1' Incorrect syntax near 'datetime'. The label 'xmlns' has already been declared. label names must be unique within a query batch or stored procedure."
ReplyDeleteAlso is it possible to add a computer name paremeter to the report so i dont get all logons for all servers?
Question for you about your report. I need to create a weekly report of user logons based on particular security groups in AD. I have the powershell script to extract the users and create an array of names, how could I embed that script in your report and create this report using just the users in that array?
ReplyDeletethanks for the guide!
ReplyDeletereplica bags in gaffar market replica bags by joy replica goyard bags
ReplyDeleteclick here for more q3p77n7a07 replica bags china replica bags aaa quality c8b04q2e62 resource k6y88o3q48 best replica designer bags 7a replica bags 7a replica bags replica gucci bags q3v60s4m96 replica bags in dubai
ReplyDeleteThanks and I have a neat give: How To Properly Renovate A House home remodeling companies near me
ReplyDelete