Top Users (Sync Events)
client_byusername?autoRun=true&form.username=$row.Username$&earliest=-24h&latest=now
Top Users by Device ID (Sync Events)
client_byusername?autoRun=true&form.username=$row.Username$&earliest=-24h&latest=now
Top Device Types
search?earliest=-24h&latest=now&q=search eventtype=client-activesync-usage DeviceType="$row.DeviceType$"| `normalize_user` |stats count by user_subject,DeviceType,DeviceId|table user_subject,DeviceType,DeviceId
Sync Events over Time
Remote Device Wipes
client_byusername?autoRun=true&form.username=$row.Username$&earliest=-24h&latest=now
User-Initiated Device Wipe Requests
client_byusername?autoRun=true&form.username=$row.Username$&earliest=-24h&latest=now