I need a solution
I'm having a bit of trouble finalizing a sql report for inventory purposes.
I am trying to use the Evt_AeX Client LogOn table to capture the last logon event and include the user that logged on during that event.
I tried simply using max[logon.time] and logon.user but this returns multiple rows per machine.
Does anyone know how I can accomplish this?