I'm required to log my start and end times at work. Occasionally I forget to do this and had a bright idea that checking the Security events log would allow me to retrospectively ascertain my times.
Unfortunately, the logs are much bigger than I thought and take a while even to display in Event Viewer. Also, I tried filtering the logs by date and userid but so far this has yielded no results.
Can anyone step-through what I'd need to do to retrieve the information I need? I've got the to point where I have filtered-out all but logins, however some of these are System-level (i.e. non-human) logins. I would like to see only my 'physical' logins (there would only be two or three such events on weekdays) and not all the other stuff.
I've tried putting my Windows username in the field as illustrated using both domain\username and just username but this just filters out everything. Can you assist?
