AnsweredAssumed Answered

User activity based on logs ad, dhcp, firewall

Question asked by Marcin Filipiak on Sep 24, 2015
Latest reply on Dec 7, 2015 by Nathan Olsen

Hi all,

I'm looking for a way to show user activity based on logs from Active Directory (Identity Feed), dhcp server, and firewall.

I'm not sure of meta created by Identity Feed, and how to correlate them with logs from dhcp server and firewall to report all user network activity. I suppose that I need to find ip address of workstation on which user is logged, and then correlate it with firewall logs.