topic Re: user-id agent log showing machine account, expected behavior or bug? in General Topics

user-id agent log showing machine account, expected behavior or bug?

Carracido — Wed, 14 Aug 2019 10:13:33 GMT

Hello community,

I´d like to check with you regarding the following:

Since upgrading the user-id agent from 8.0 to 8.1 the user-id logs in the firewalls are showing "Managed Service Accounts" (computer accounts with "$" appended at the end) in the way "domain\computer_account$" as well as the user account who logs into the computer.

Does anyone know if this is a normal behavior?

Thank you.

Re: user-id agent log showing machine account, expected behavior or bug?

kiwi — Wed, 14 Aug 2019 10:31:49 GMT

Hi @Carracido ,

Yes this is expected. You can easily put those in the ignore list if desired:

How to Ignore Users in User-ID

Cheers !

-Kiwi.

Re: user-id agent log showing machine account, expected behavior or bug?

GregSweeney — Mon, 25 Jan 2021 20:44:40 GMT

We put accounts in the ignore_user_list.txt on servers running the user-id agent. Will the wildcard work in those files?