The most recent content from our members.
I made a stupid error somewhere along the way trying to make a change to our Solarwinds Service Desk provisioning in AzureAD and when it synced it disabled all 5 of our Administrator accounts, which in-turn, also disabled my API key. We have no "local" non-SSO accounts on our instance that I know of, so without a…
All, I created an user account lockout report for our help desk to use so that they can find out why the user was locked out. This report looks at user lockout events. It will list who is locked out and which system the lockout originated from. I had to use a SQL query in order to strip out the user and the system where…
Hi I need help in setting up the alert for a specific users when his/her account gets locked out. Currently i am monitoring the event ID 4740 which sends me a alert whenever the event is generated with the message showing all the details of account lockout. I have a requirement now asking to trigger alert when a certain…
Hi I have created a windows event template for user account lockout. I want to send a email everytime a account gets locked out in any of my DC. I have used the variable ${N=SwisEntity;M=ComponentAlert.WindowsEventMessages} which gives me full event message with header and subject as below --- Event 1 of 1: Log Name:…
We have an issue where a Tech is working on a ticket, then mid-stream another tech hops on it, disrupting the continuity of support to the staff who has created the ticket. Is there anyway to lock all other techs (except perhaps group manager) out of ticket except the assigned Tech, after it has been assigned. Thanks for…
I am trying to take an SQL Query and plug it into the SWQL Custom Query on one of our Orion views. this is what i have.. replaced names in brackets.. use [database] SELECT ComputerName, SourceName, Message from dbo.APM_WindowsEvent_Detail where ComputerName IN ('[list of all our domain controllers]') and message like…
It looks like you're new here. Sign in or register to get started.