https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206128#M65922 <P>Hi</P><P>I've created a smartevent report to show administrator last login time (with the goal to see who hasn't in X period of time).&nbsp; This works great if the person has logged in, however even though I've put a tick in "Show results with empty values" I'm not seeing acc that haven't logged in.&nbsp; Is there some other filter or setting I need to add to see this?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Table settings.PNG" style="width: 664px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24509i2FFF93B02805B8D4/image-size/large?v=v2&amp;px=999" role="button" title="Table settings.PNG" alt="Table settings.PNG" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Table filter.PNG" style="width: 635px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24508i929C84EB851FAC1D/image-size/large?v=v2&amp;px=999" role="button" title="Table filter.PNG" alt="Table filter.PNG" /></span></P> Wed, 14 Feb 2024 19:59:02 GMT cem82 2024-02-14T19:59:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206128#M65922 <P>Hi</P><P>I've created a smartevent report to show administrator last login time (with the goal to see who hasn't in X period of time).&nbsp; This works great if the person has logged in, however even though I've put a tick in "Show results with empty values" I'm not seeing acc that haven't logged in.&nbsp; Is there some other filter or setting I need to add to see this?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Table settings.PNG" style="width: 664px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24509i2FFF93B02805B8D4/image-size/large?v=v2&amp;px=999" role="button" title="Table settings.PNG" alt="Table settings.PNG" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Table filter.PNG" style="width: 635px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24508i929C84EB851FAC1D/image-size/large?v=v2&amp;px=999" role="button" title="Table filter.PNG" alt="Table filter.PNG" /></span></P> Wed, 14 Feb 2024 19:59:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206128#M65922 cem82 2024-02-14T19:59:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206130#M65923 <P>Makes sense to me that you dont see users that have not logged in.</P> <P>These reports are based on logs. If someone never logins it will not show in a report. Does that make sense?</P> Wed, 14 Feb 2024 20:11:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206130#M65923 Lesley 2024-02-14T20:11:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206131#M65924 <P>It does and doesn't <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span>&nbsp; I would have hoped the Empty Values option would have shown them.&nbsp; Is there any other way to accomplish the goal or would we have to export entire list of admin and then remove who does appear in this report?</P> Wed, 14 Feb 2024 20:13:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206131#M65924 cem82 2024-02-14T20:13:12Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206159#M65925 <P>You can't do a statistical table based on time. You need to choose - either statistical table with number of log in operations or a log table with latest logins:<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Capture.PNG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24515i93169F4675301EC6/image-size/large?v=v2&amp;px=999" role="button" title="Capture.PNG" alt="Capture.PNG" /></span></P> Thu, 15 Feb 2024 08:53:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Smartevent-report-for-administrator-last-login-with-zero-count/m-p/206159#M65925 Amir_Senn 2024-02-15T08:53:34Z