How to create a rule to monitor all activity of a specific admin

columbia

Hello,

I have seen the videos and searched the forums, but I was not successful in finding how to create 1 rule that will monitor all the activity for a specific admin. Again, I know there is a way to create multiple rules, but I wanted to know if there was a way to create 1 rule that covers all.

Any assistance would be greatly appreciated.

Thanks,

Mo

curtisi

There are some things about this request that I think complicate things.

In the context of LEM, a rule is something that looks for some sort of activity or pattern of events and then alerts on it.  If there are specific types of activity that you want to receive notifications or responses on, LEM can help.  Creating a single rule that sends an e-mail every time your admin does anything isn't really possible, and it would probably flood you with too much e-mail anyway.

It sounds more like what you want is some sort of report, and I think we can help there.  There are a number of stock reports that track things like AD changes and logon activity, and you can filter those to a specific user or users.