You want to find all events related to the user with the login ID of...

 In UBA systems, events are typically associated with user accounts, which are identified by usernames. Therefore, to find all events related to a specific user, you would filter by the username associated with that user’s account. The filter user_name ='ivan.helen@acme' would be used to retrieve all events where the username ‘ivan.helen@acme’ is involved.

References: This guidance is based on standard practices for querying event data in UBA systems. For the most accurate and detailed explanation, please refer to the official CyberArk Defender Access (ACC-DEF) study guide and course documentation, which can be found through the CyberArk training portal1.