2 Replies Latest reply on Aug 31, 2016 6:43 AM by bobmarley

    Viewing Event Log Data, SAM Question


      I am trying to display in a dashboard which users are currently logged in to a specific server via RDP


      I set up an event log monitor in SAM to look for windows Event Number 4624 then Login type 10 (which is RDP)


      Looking at the documentation for SAM below...

      Windows Event Log monitor


      There is a checkbox that when enabled states "Message and other details of matched events will be available for viewing and alerting when enabled" See below.


      Anyone know what the variable is to include this info into an alert, or how can I view it within a custom dashboard?


      I am able to get to the data in SAM but I would like to include in in an alert or dashboard.