Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
10/21/26 04:40:39 PM AdobeARM WINSTAT-201 Ended PRIMO\drhansen3 3 578
10/21/26 04:40:36 PM CRWindowsClientService WINSTAT-201 Ended PRIMO\drhansen3 3 141
10/21/26 04:40:35 PM CRWindowsClientService WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:35 PM cmd SILO-227 Ended PRIMO\ako6 2 47
10/21/26 04:40:35 PM TSTheme SILO-227 Ended PRIMO\ako6 2 16
10/21/26 04:40:35 PM conhost SILO-227 Ended PRIMO\ako6 2 31
10/21/26 04:40:35 PM Bginfo64 SILO-227 Ended PRIMO\ako6 2 156
10/21/26 04:40:33 PM Bginfo64 SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:33 PM Acrobat WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:33 PM powershell SILO-227 Ended PRIMO\ako6 2 734
10/21/26 04:40:33 PM Acrobat WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:31 PM powershell SILO-227 Ended PRIMO\ako6 2 422
10/21/26 04:40:31 PM powershell SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:30 PM powershell SILO-227 Ended PRIMO\ako6 2 391
10/21/26 04:40:30 PM powershell SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:29 PM LogonUI SILO-227 Ended NT AUTHORITY\system 2 109
10/21/26 04:40:29 PM powershell SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:29 PM wscript SILO-227 Ended PRIMO\ako6 2 109
10/21/26 04:40:29 PM cmd SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:29 PM conhost SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:29 PM 192.168.48.84 SILO-227 SessionUnlock PRIMO\ako6 2
10/21/26 04:40:29 PM Acrobat WINSTAT-201 Ended PRIMO\drhansen3 3 1641
10/21/26 04:40:29 PM Acrobat WINSTAT-201 Ended PRIMO\drhansen3 3 1094
10/21/26 04:40:29 PM dwm SILO-227 Ended WINDOW MANAGER\dwm-6 6 62
10/21/26 04:40:29 PM LogonUI SILO-227 Ended NT AUTHORITY\system 6 172
10/21/26 04:40:29 PM winlogon SILO-227 Ended NT AUTHORITY\system 6 172
10/21/26 04:40:29 PM fontdrvhost SILO-227 Ended FONT DRIVER HOST\... 6
10/21/26 04:40:29 PM CtxGfx SILO-227 Ended NT AUTHORITY\system 6 109
10/21/26 04:40:29 PM wscript SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:29 PM 192.168.48.84 SILO-227 RemoteConnect PRIMO\ako6 2
10/21/26 04:40:29 PM TSTheme SILO-227 Started PRIMO\ako6 2
10/21/26 04:40:29 PM SILO-227 RemoteDisconnect 6
10/21/26 04:40:28 PM RuntimeBroker WINSTAT-207 Ended PRIMO\jldykema 2 16
10/21/26 04:40:18 PM conhost SILO-229 Ended PRIMO\mmaury 5 31
10/21/26 04:40:18 PM cmd SILO-229 Ended PRIMO\mmaury 5 47
10/21/26 04:40:18 PM Bginfo64 SILO-229 Ended PRIMO\mmaury 5 125
10/21/26 04:40:17 PM Bginfo64 SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:17 PM powershell SILO-229 Ended PRIMO\mmaury 5 734
10/21/26 04:40:16 PM fontdrvhost SILO-227 Started FONT DRIVER HOST\... 6
10/21/26 04:40:16 PM dwm SILO-227 Started WINDOW MANAGER\dwm-6 6
10/21/26 04:40:16 PM CtxGfx SILO-227 Started NT AUTHORITY\system 6
10/21/26 04:40:16 PM LogonUI SILO-227 Started NT AUTHORITY\system 6
10/21/26 04:40:16 PM 192.168.48.84 SILO-227 RemoteConnect 6
10/21/26 04:40:15 PM winlogon SILO-227 Started NT AUTHORITY\system 6
10/21/26 04:40:15 PM powershell SILO-229 Ended PRIMO\mmaury 5 484
10/21/26 04:40:15 PM powershell SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:14 PM powershell SILO-229 Ended PRIMO\mmaury 5 359
10/21/26 04:40:14 PM powershell SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:14 PM wscript SILO-229 Ended PRIMO\mmaury 5 47
10/21/26 04:40:14 PM conhost SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:14 PM powershell SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:14 PM cmd SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:13 PM wscript SILO-229 Started PRIMO\mmaury 5
10/21/26 04:40:11 PM ADNotificationManager WINSTAT-201 Ended PRIMO\drhansen3 3 78
10/21/26 04:40:11 PM ADNotificationManager WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:10 PM AdobeARM WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:09 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:07 PM Acrobat WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:07 PM Acrobat WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:06 PM conhost WINSTAT-201 Ended PRIMO\drhansen3 3 62
10/21/26 04:40:06 PM CRLogTransport WINSTAT-201 Ended PRIMO\drhansen3 3 16
10/21/26 04:40:06 PM CRWindowsClientService WINSTAT-201 Ended PRIMO\drhansen3 3 250
10/21/26 04:40:06 PM CRLogTransport WINSTAT-201 Ended PRIMO\drhansen3 3 62
10/21/26 04:40:06 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:06 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:06 PM conhost WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:06 PM CRLogTransport WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:06 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:06 PM CRLogTransport WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:05 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:05 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:05 PM CRWindowsClientService WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:05 PM Adobe Crash Processor WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:05 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
10/21/26 04:40:04 PM msedgewebview2 WINSTAT-201 Started PRIMO\drhansen3 3
695 million total events