I'm trying to see if we can alert on a user account that is expiring in 30 days. We have Orion and ARM, but just can't seem to be able to do it.
Thanks!
Hi @jere557
You could add a PowerShell based monitor that asks your AD how many accounts has passwords that expires within 30 days.
When you have that information within SWOSH, you may create an alert on it.
I may just have to go down that route, we have ARM which has the information, but I can't seem to use that data in the way i want to.
From the demo page: https://hco.demo.solarwinds.com/apps/platform/dashboard/SecObs-Summary I can see that SWOSH have some ARM data that is close to what you want. Do you see the information you are after there in your SWOSH? If so, we can create an alert on it.
Not sure what data ARM is pushing to SWOSH.