I created a list of client IP addresses using the SMB protocol using DMI, but I cannot get individual user names or client IP addresses. Since "Client form nn.nn.nn.nn / 24" is displayed, I think that the information is aggregated.
However, if the software service was changed to HTTP, individual user names and IP addresses could be obtained.
Then I tried it in DCRUM2017, but I was able to get individual user names and IP addresses here.
I want to know if there is a solution.
Answer by Kris Z. ·
Indeed aggregation occurs, on report server. There are several settings that control aggregation; it looks that your CAS 2017 and 2018 settings differ. Start with looking at Settings > NAM Server configuration and see which user aggregation options are enabled.
Also, have a look at on-demand data (just drill down into "client from..." on standard CAS reports" to see what client IP addresses are reported, exactly, and how many of them.