Hello,

I am looking in Profile Based Reports -> Account Logon - All Users Logon and this report does not capture even ID 4769 (Kerberos service ticket has been requested). This does not make sense as I see the events in the Security Log on my domain controllers, and ADAudit is configured to capture this event ID in Configuration -> Advanced Configurations -> Kerberos service ticket was requested. Please advise how to get event ID 4769 to show in the reports