Two users shown in report and log

[Sajid_Abbas]

Hi,

While generating use reports in SmartEvent, i saw that user column show two or more users for some entries. 

How is that calculated? Does it mean that two or more users were logged on the machine at the same time?

Thanks

[PhoneBoy]

Possibly but it depends on how the identities are being acquired.

If you're using AQ Query, we do not pull information about logout events, only login and kerberos-related events.

As such, a user stays associated with a given IP until it times out.

There's an option to only allow one user per IP, but it's disabled by default.