Events for Lockouts are duplicated on PDC and other DC's
PrzemyslawKlys opened this issue · 0 comments
PrzemyslawKlys commented
When lockout happens it often happens that lockout is reported on one DC and then transferred to PDC. This means 2 events for 1 real event.
Maybe some kind of duplicate checking - if Event ID, User, Computer, Action, and only RecordID/Controller doesn't match merge events.