Morning all,
Does anyone know how the trigger condition for the alert "Alert me when MAC address moves" works? The trigger is Has MAC Moved is equal to 1, and I'm after information on the following:
- does the Has MAC moved trigger mean that a MAC address has moved to another switch port/been seen on a different port previously or just that it's disconnected?
- When does the value clear down? i.e. if the alert is triggered for a MAC address, what resets the value back to zero? Acknowledging the alert? A timeout value?
To give a bit of background, we are trying to help our desktop team out with identifying when users move PCs without telling them (for asset tracking purposes).
Thanks in advance,
John