The most recent content from our members.
Hi I have created a windows event template for user account lockout. I want to send a email everytime a account gets locked out in any of my DC. I have used the variable ${N=SwisEntity;M=ComponentAlert.WindowsEventMessages} which gives me full event message with header and subject as below --- Event 1 of 1: Log Name:…
I currently have some component monitors set on our DC to flag Microsoft Security Auditing for ID 4740 (Account lock) and 4767 (Account Unlock). Quick questions on the configuration though, maybe someone can offer some insight on. For an account lock the node shows a down component and sends an email alert if event 4740…
It looks like you're new here. Sign in or register to get started.