FSSO Logon Users How to clear a single user login event cache in FSSO Agent on active directory ?

Hello

I don't think this can be done at agent level, but it should be doable at FGT level, go to FortiView user monitor and enable show FSSO logons, then right click on the use. Not sure but you can try to confirm.

Boa postagem @BlueP.

AEK thank you for your reply but, it can only be done on the FGT level if the user is already authenticated and I can de-authenticate it, while if there is an issue that some logon users are not authenticated on the FGT level you do it from FGT and the only way to de-authenticate it from the collector, however the collector option clear user cache is deauthenticated the whole list.

do you have any updates regarding this? 

Have you solved your problem? I have the same issue, I want to clear single users login from the event cache in FSSO.

or do they have other solution for clearing the log from single user?