Is there any type of unique session ID generated when a user connects to the SA that can be sent to a syslog server? I need to be able to generate reports for HR reasons on session lengths. I know there is date/time connect/disconnect event IDs but what if a user is logged on multiple sessions, how can I determin lengths on specific sessions?
thanks,
Dan
If a user is logged in multiple times, you can simple calculate the total time for that user ID, since user ID is going to be unique per realm / auth server.