User Sessions report

User Sessions report complements User Activity report in the previous section by showing a detailed time card for each logon session on the network's managed devices. This time card can be used to track (and furnish evidence of) users logging on to the network, including each session start time, stop time, and session type.

The BMC Defender User Session report is different from the User activity report and is intended to furnish detailed information on user access. Whereas User activity report contains several metrics on sessions, those metrics are more of an approximation (necessary to determine general activity, based on message rates). User Session report here furnishes much more precise information suitable for indicating when you had access to the network.

The report is configured to work with standard Windows sessions and is based on the standard Windows Logon ID value (that is unique to each session and device). It might be possible to reconfigure the report (via the Advanced screen) to work with other types of sessions, but the default is to monitor only standard Windows sessions.

This section provides information about the following topics: