Re: Re: Is there a place to find recommended or sample filters, rules and reports?

First, you're going to need to configure your LEM to be able to talk to Active Directory.

SolarWinds Knowledge Base :: How to Configure the Directory Service Query Connector

Then, you'll need to bring in your Domain Admins group to the LEM, it's kind of like this process, but under Build > Groups click the + and then go to Directory Service Groups.

SolarWinds Knowledge Base :: How to create LEM console users with domain credentials

Now, we can make a filter.

I think that would get you all setup for watching Domain Admins do things in real time.