Skip to content

[BUG] UserPrincipalName issue in Windows Large Number of Computer Service Tickets Requested #4083

Closed

Description

@thegreatmhn

in the original search, filter must exclude the computer accounts but in action sometimes the output of
TargetUserName is userPrincipalName like this scheme $@.
so the filter TargetUserName!="*$" is not effective.
for search effectivness add the following queries to the scenario to exclude computer accounts:

| eval TargetUserName = if(match(TargetUserName, "@"), mvindex(split(TargetUserName, "@"), 0), TargetUserName)
| search NOT TargetUserName = "*$"

this query will fix the computer account exclusion.

Activity

  1. added theissue type on May 16, 2026
  2. self-assigned this
    on May 18, 2026
  3. nasbench commented on May 18, 2026

    @nasbench
    Contributor

    I will investigate this

  4. added this to the V6.3.0 milestone on Jul 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions