Is there a way to determine in the audit logs...

[Matthew_Brown]

Is there a way to determine in the audit logs if a user logs in, somewhere, like L.A., and then a moment later in New York?

This is a result of a “land speed” requirement for security purposes.

Ex. - if same account logs in within 5 minutes of LA/NYC, there could be a security breach

[pravse]

Adding @Philip_Garrett_Appsh FYI

Phil is implementing a mechanism for some relatively simple alerting on the audit log. This specific request might be more complex than the current design allows.