This article explains how to create a summary-based custom report to view the total number of lockouts per user and clarifies the limitations of this report.
You must have access to the ADAudit Plus web console with permissions to create and manage custom reports.
Your domain controllers must be configured in ADAudit Plus, and logon event data must be collecting successfully.
Set the Report Type to Summary View.
Under Report Category, select AD Objects, expand User Management, and choose the Locked Out Users sub-module.
Click Next.
On the next screen, under Summarize information by, select the Username column.
For the Summary column, select Count, and then click Save.
It is not currently possible to group the user lockout report by parts of a date, such as by the hour. The product's reporting feature groups by the exact timestamp down to the second, not by aggregated time intervals.
This functionality has been submitted to the product team as a feature request for future evaluation.