Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
10/28/26 04:34:32 PM Bginfo64 WINSTAT-201 Ended PRIMO\rfeng39 6 297
10/28/26 04:34:32 PM conhost WINSTAT-201 Ended PRIMO\rfeng39 6 94
10/28/26 04:34:32 PM cmd WINSTAT-201 Ended PRIMO\rfeng39 6 125
10/28/26 04:34:31 PM msedge WINSTAT-222 Ended PRIMO\boschetti 7 47
10/28/26 04:34:31 PM TSTheme WINSTAT-201 Ended PRIMO\rfeng39 6 47
10/28/26 04:34:31 PM msedge WINSTAT-222 Started PRIMO\boschetti 7
10/28/26 04:34:31 PM Bginfo64 WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:31 PM powershell WINSTAT-201 Ended PRIMO\rfeng39 6 1469
10/28/26 04:34:28 PM quser WINSTAT-201 Ended PRIMO\rfeng39 6 16
10/28/26 04:34:28 PM powershell WINSTAT-201 Ended PRIMO\rfeng39 6 703
10/28/26 04:34:28 PM powershell WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:28 PM quser WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:27 PM powershell WINSTAT-201 Ended PRIMO\rfeng39 6 734
10/28/26 04:34:27 PM powershell WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:26 PM powershell WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:26 PM wscript WINSTAT-201 Ended PRIMO\rfeng39 6 156
10/28/26 04:34:26 PM taskhostw WINSTAT-201 Ended PRIMO\rfeng39 6 31
10/28/26 04:34:26 PM LogonUI WINSTAT-201 Ended NT AUTHORITY\system 6 641
10/28/26 04:34:26 PM TabTip WINSTAT-201 Ended NT AUTHORITY\system 6 1203
10/28/26 04:34:26 PM conhost WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:26 PM cmd WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:26 PM winlogon WINSTAT-201 Ended NT AUTHORITY\system 10 141
10/28/26 04:34:26 PM LogonUI WINSTAT-201 Ended NT AUTHORITY\system 10 500
10/28/26 04:34:26 PM dwm WINSTAT-201 Ended WINDOW MANAGER\dw... 10 172
10/28/26 04:34:26 PM fontdrvhost WINSTAT-201 Ended FONT DRIVER HOST\... 10
10/28/26 04:34:26 PM CtxGfx WINSTAT-201 Ended NT AUTHORITY\system 10 250
10/28/26 04:34:26 PM wscript WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:26 PM taskhostw WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:26 PM 10.0.0.44 WINSTAT-201 SessionUnlock PRIMO\rfeng39 6
10/28/26 04:34:26 PM 10.0.0.44 WINSTAT-201 RemoteConnect PRIMO\rfeng39 6
10/28/26 04:34:25 PM TSTheme WINSTAT-201 Started PRIMO\rfeng39 6
10/28/26 04:34:25 PM WINSTAT-201 RemoteDisconnect 10
10/28/26 04:34:23 PM dwm WINSTAT-201 Started WINDOW MANAGER\dw... 10
10/28/26 04:34:23 PM CtxGfx WINSTAT-201 Started NT AUTHORITY\system 10
10/28/26 04:34:23 PM 10.0.0.44 WINSTAT-201 RemoteConnect 10
10/28/26 04:34:23 PM LogonUI WINSTAT-201 Started NT AUTHORITY\system 10
10/28/26 04:34:23 PM fontdrvhost WINSTAT-201 Started FONT DRIVER HOST\... 10
10/28/26 04:34:22 PM winlogon WINSTAT-201 Started NT AUTHORITY\system 10
10/28/26 04:34:18 PM LogonUI SILO-231 Ended NT AUTHORITY\system 18 78
10/28/26 04:34:18 PM dwm SILO-231 Ended WINDOW MANAGER\dw... 18 6531
10/28/26 04:34:18 PM fontdrvhost SILO-231 Ended FONT DRIVER HOST\... 18 47
10/28/26 04:34:18 PM winlogon SILO-231 Ended NT AUTHORITY\system 18 156
10/28/26 04:34:16 PM SILO-231 RemoteDisconnect 18
10/28/26 04:34:15 PM svchost SILO-231 Ended PRIMO\rawilliams6 18 62
10/28/26 04:34:15 PM RuntimeBroker SILO-231 Ended PRIMO\rawilliams6 18 500
10/28/26 04:34:15 PM RuntimeBroker SILO-231 Ended PRIMO\rawilliams6 18 2469
10/28/26 04:34:15 PM conhost SILO-231 Ended PRIMO\rawilliams6 18 47
10/28/26 04:34:15 PM gpscript SILO-231 Ended PRIMO\rawilliams6 18 16
10/28/26 04:34:15 PM svchost SILO-231 Ended PRIMO\rawilliams6 18 281
10/28/26 04:34:15 PM powershell SILO-231 Ended PRIMO\rawilliams6 18 344
10/28/26 04:34:15 PM SILO-231 SessionLogoff 18
10/28/26 04:34:14 PM cvtres SILO-231 Ended PRIMO\rawilliams6 18 16
10/28/26 04:34:14 PM csc SILO-231 Ended PRIMO\rawilliams6 18 78
10/28/26 04:34:14 PM cvtres SILO-231 Started PRIMO\rawilliams6 18
10/28/26 04:34:14 PM csc SILO-231 Started PRIMO\rawilliams6 18
10/28/26 04:34:14 PM conhost SILO-231 Started PRIMO\rawilliams6 18
10/28/26 04:34:14 PM powershell SILO-231 Started PRIMO\rawilliams6 18
10/28/26 04:34:13 PM ctfmon SILO-231 Ended PRIMO\rawilliams6 18 281
10/28/26 04:34:13 PM SearchUI SILO-231 Ended PRIMO\rawilliams6 18 328
10/28/26 04:34:13 PM ShellExperienceHost SILO-231 Ended PRIMO\rawilliams6 18 422
10/28/26 04:34:13 PM taskhostw SILO-231 Ended PRIMO\rawilliams6 18 31
10/28/26 04:34:13 PM explorer SILO-231 Ended PRIMO\rawilliams6 18 14141
10/28/26 04:34:13 PM sihost SILO-231 Ended PRIMO\rawilliams6 18 891
10/28/26 04:34:13 PM gpscript SILO-231 Started PRIMO\rawilliams6 18
10/28/26 04:34:13 PM WfShell SILO-231 Ended PRIMO\rawilliams6 18 297
10/28/26 04:34:13 PM VdaRedirector SILO-231 Ended PRIMO\rawilliams6 18 31
10/28/26 04:34:13 PM SCNotification SILO-231 Ended PRIMO\rawilliams6 18 375
10/28/26 04:34:13 PM icak2meng SILO-231 Ended NT AUTHORITY\system 18 16
10/28/26 04:34:13 PM CtxGfx SILO-231 Ended PRIMO\rawilliams6 18 2016
10/28/26 04:34:13 PM CtxMtHost SILO-231 Ended PRIMO\rawilliams6 18 47
10/28/26 04:34:13 PM LogonUI SILO-231 Started NT AUTHORITY\system 18
10/28/26 04:34:10 PM msedge WINSTAT-222 Ended PRIMO\boschetti 7 47
10/28/26 04:34:10 PM msedge WINSTAT-222 Started PRIMO\boschetti 7
10/28/26 04:34:10 PM StataSE-64 SILO-231 Ended PRIMO\rawilliams6 18 4609
10/28/26 04:34:07 PM StataSE-64 SILO-231 Ended PRIMO\rawilliams6 18 1547
697 million total events