I am working on a sensor to monitor what user is logged into a pc. Originally I thought using wmic to query username currently logged in, but PRTG cannot handle a returned text value. Tried using powershell to check event logs and it only shows the event ID count. The logs show part of the message but cannot view the whole message to see what user logged in.
Has anyone tried to create a sensor for this purpose and if so would you give me advice on how you made it work? Thank you.