We have a lot of outside vendors connecting to numerous View pools. Unfortunately the departments they're serving internally are not good at auditing vendor employee turnover. I need a way to audit user logons say for users who have not logged on in the last 90 days. We're playing around with the View SCOM MP, but the report there appears to not be current. The attribute it pulls is "SMS_G_System_SYSTEM_CONSOLE_USER.Time Stamp", but this value on cross check with View admin events appears dated.
Is there an existing report in the SCOM MP that would fill this need? If not, is there a query against the View database tables that would provide this info?