Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Looking to create a rule that emails when a set user locks out.

I am really new to SEM and I am looking to create an email alert for when a specific user locks out. We already have a lockout rule for all users but I want one just for this user bonus points if it can give info on failed login attempts.

Find more posts tagged with

Accepted answers

All comments

Rule is true when

UserDisable.EventInfo is equal to *Account Lock*

AND

UserDisable.SourceAccount is equal to "*[account name]*" make note of * before and after

Click or drag an item from the left panel.

And whole rule occurs at least 1x in 30 sec in 5 min window

this is a copy of the lockout rule with the condition when source account please note this is hardcoded if you want a list of the specific account using user-defined group or directory group if your want more than one,

Quick Links