I've been asked to provide reports for a series of users outlining when they logged on/off the network. I've filtered the security log on the DC but I think I need to refine the results more. The security logs show events for the users in clumps of 3-6 every 10 minutes or so. I think alot of this is noise. Is there a way to further refine my results to just logging on/off the network?