How to create a custom report on users who accessed a specific server
Objective
This article explains how to create a custom report in ADAudit Plus that shows all successful user logon attempts to one or more specific servers.
Prerequisites
You must have access to the ADAudit Plus web console with an administrator account or a technician account with permissions to create custom reports.
Logon auditing must be enabled on the Domain Controllers, and ADAudit Plus must be configured to collect these logon events.
Sufficient data retention must be configured in ADAudit Plus to ensure historical data is available for the desired reporting period.
Steps to follow
- Log in to the ADAudit Plus web console.
- Navigate to the Analytics tab.
From the left pane, click Custom Report, then click Create Custom Report.
Enter a relevant Name and Description (e.g., User Access to Critical Servers) and select the appropriate Domain.
Select the desired report type based on your requirements.
Tabular View: Displays data in a simple table format (graph is optional).
Graphical View: Presents data using various chart types for visual analysis.
Summary View: Shows grouped data with subtotals for easier interpretation.
Pivot View: Summarizes data in a grid format with both horizontal and vertical.
For Select Report Category, choose Logon Activity.
For Selected Sub Module(s), choose Logon Success.
Click Next.
On the next screen, under Columns to be displayed, you can customize the columns to be displayed in the report. Click Next to proceed.
If you want to include a chart in the custom report, expand the Charts section, then select the Graph Type and specify how you want to Group By (X-axis).
Under the Filters section, click Add Filter.
Configure the filter to target your specific server(s). Set the filter to:
Client Host Name | equals | [Type the name of the server(s) you want to report on].
Expand the Scheduler section and set the desired frequency for generating the report. If you'd like the custom report to be emailed each time the schedule runs, enable the Email this scheduled Report option.
You can also set the privacy of the custom report to define who can view it, choosing between public or private.
Finally, select the folder in ADAudit Plus where you want the report to be saved.
Click Save to create the custom report.
Validation and confirmation
- After saving, the custom report will automatically run and display the results.
- Verify that the report only shows successful logon events for the server(s) you specified in the filter.
Confirm that all the columns you selected during the setup process are visible in the report.
Tips
Once created, you can access this report anytime from the Analytics > Custom Report section.
You can schedule this custom report to be automatically generated and emailed to security teams or department managers on a daily, weekly, or monthly basis.
Related topics and articles
New to ADSelfService Plus?
Related Articles
How to create a custom report in ADAudit Plus
Objective To create a custom report in ADAudit Plus that displays specific audit data tailored to your organization’s requirements, enabling focused monitoring, analysis, and compliance reporting. Prerequisites You must have administrative access or ...How to create an alert profile for tracking login attempts by specific users or groups
Objective This article explains how to create an alert profile in ADAudit Plus to monitor and notify administrators whenever specific users or groups successfully log in. The alert can be configured for both Domain Controller authentication events ...How to create a custom report to audit file activity by process name
Objective This article explains how to create a custom report in ADAudit Plus to audit file and folder activities based on the specific process (for example, explorer.exe, powershell.exe) that performed the operation. Prerequisites You must have ...How to schedule a custom File/Folder changes report excluding specific File Types
Objective This article explains how to configure and schedule a custom File/Folder Change report in ADAudit Plus while applying filters to exclude specific file types. This allows administrators to monitor critical file activity while ignoring ...How to set up alerts to monitor both domain authentication and workstation logon events for specific users or groups
Objective This article explains how to configure ADAudit Plus alert profiles to monitor successful domain authentication events (Event ID 4768) and local logon events (Event ID 4624) performed by specific users or groups. By setting up these alerts, ...