Hello, I am trying to write a search to look for an admin logged into our cisco vpn1 and vpn2 instance at the same time. The VPN is setup to only allow one session from an admin. However, each site enforces that as each VPN setup doesn't know about the sessions at the other site. This could be used to connect maliciously with a compromise account without kicking off a legitimate admin. Looking for something that will match when both instances are logged into by the same user account. Thanks ... View more