UserName on events Logon/Logoff in im_msvistalog

View thread

Altair.Pa

Hi, I am collecting events (im_msvistalog) from system 7001 and 7002 logon and logoff, I would like to know which field I use to catch the user who is logged on or off, because $UserID returns a SID.

Thank you.