First published on TECHNET on Apr 18, 2013
Here are a couple of ACS reports to show the event count by User, Forwarder, and Event ID. Just import the .rdl files into a folder in SQL Server Reporting Services.
The first report “Event Count Overview” shows the top 10 Events, Forwarders, and User Names for the specified date range:
Click on any of the bars in the chart or the chart titles to launch the “Event Count Details” report. This report shows more detail about the item that you clicked on. For example, if you click on the bar for a specific event Id in the “Top 10 Events” section, it will show the top 10 User Names and Forwarders for this event:
If you click on the bar for a specific Forwarder in the “Top 10 Forwarders” section, it will show the top 10 User Names and Events IDs for this forwarder:
If you click on one of the chart titles it will show details for all events in the chart. For example, clicking on “Top 10 Events” shows the top 10 User Names and Forwarders for each of the top 10 events:
You can also run the “Event Count Details” report on its own to show the Top N User Name, Event or Forwarder based on a User, Event, or Computer Name filter:
