SAM Event Monitor and Alert Question

martian_monster

Hello -

I have a custom Windows Event log Monitor in SAM setup to monitor the event logs on our SFTP servers.  If there is a SFTP login failure it sends an alert to teams and an email to the security team.

Is there any way to include the Event log message in the alert?  If I go to the SFTP server in Orion and check the failed logins monitor on it it will list the account that failed.  Is there some way to get the account/userName into the alerts at all?

 

Thanks! Dave

martian_monster

I found this article hopefully this may help - support.solarwinds.com/.../Display-Windows-event-log-messages-within-alert-email-in-SAM