This view is available with Lacework data share v.1, v.2, v.3, or v.4.
This view provides raw historic data about user login/logout activity.
Lacework regularly monitors for user login/logout activity in your environment and returns a row in the USER_LOGIN_V view when Lacework detects a user login/logout activity.
Each row contains user login/logoff information as listed in the columns.
|Column Name||Data Type||Description|
|CREATED_TIME||Timestamp||The time and date when the login or logout was detected by Lacework.|
|MID||Number||The Lacework-generated machine identifier for the system that is being logged into or logged out of.|
|ACTIVITY_TIME||Timestamp||The time and date when the user logs in or logs out.|
|ACTIVITY_TYPE||Text (Login or Logoff)||The user activity type, either the string Login or Logout.|
|USERNAME||Text||The username of the user that logged in or logged out.|
|UID||Number||The Linux unique identifier associated with the user on this machine.|
|SOURCE_IP_ADDR||Text||The IP address of the system where the login is originating from.|