Anonymous_User Absent Member.
Absent Member.
193 views

filtering via InitiatorUserName - possible ?


SLM 1.2.1

I want to drop all those events where InitiatorUserName is 'dc1$' or
more specifically '*$'.

please help me to filter/drop all events where InitiatorUserName is a
system/machine


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=47739

0 Likes
1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: filtering via InitiatorUserName - possible ?

Hi,

take a look at the parameters in the latest windows collector. There you can
e.g. configure it to "Drop Computer-Generated
Logon and Logoff Events".

Norbert

>>> On 13.05.2013 at 14:04, sharfuddin<sharfuddin@no-mx.forums.netiq.com>

wrote:

> SLM 1.2.1
>
> I want to drop all those events where InitiatorUserName is 'dc1$' or
> more specifically '*$'.
>
> please help me to filter/drop all events where InitiatorUserName is a
> system/machine


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.