HI,
I just had a previous post in which I am now able to monitor for account lockout in the security event logs. I have added and was able to successfully test.
However, with the real account I am getting false alarms. I just got an alarm that shows it found event ID 675, however, if I go to the logs, this is not there. Not sure if it helps, but the error in the alert reads " The remote device timed out before before sending a response". I checked the timing in the monitor and all of them are set to 300 seconds.
Thanks for any suggestions
David
