Relevance: If user of process contains a certain username

Reporting
1

I’m trying to create a relevance to show true if the user of a certain process contains a certain username. Right now I can do

q: user of process whose (name of it=“java.exe”)
And the answer shows me the correct username.

How can I take that to give “True” if the username contains “abc”?

2

@dan_obiedzinski, you can try this.
I left the statement in plural form because we might have multiple java.exe processes.

exists processes whose (name of it = "java.exe" and account name of user of it = "abc")
3

Awesome! thanks. Now if I want to take this one step further to only tell me the result if that user is actually logged in?

4

@dan_obiedzinski, you can change the hard coded user name to the the logged on user.

exists processes whose (name of it = "java.exe" and account name of user of it = name of logged on user)
1 Like
5

thanks!!! Big Help!