collector.logon.md

logon collector

The logon collector exposes metrics detailing the active user logon sessions.

Metric name prefix	logon
Classes	Win32_LogonSession
Enabled by default?	No

⚠️ On some deployments, this collector seems to have some memory/timeout issues: See #583

Flags

None

Metrics

Name	Description	Type	Labels
windows_logon_logon_type	Number of active user logon sessions	gauge	status

Example metric

Query the total number of interactive logon sessions

windows_logon_logon_type{status="interactive"}

Useful queries

Query the total number of local and remote (I.E. Terminal Services) interactive sessions.

windows_logon_logon_type{status=~"interactive|remote_interactive"}

Alerting examples

This collector does not yet have alerting examples, we would appreciate your help adding them!