3 Replies Latest reply on Jan 25, 2017 4:13 PM by cluele$$

    Filter assistance handling multiple accounts targeting one system, and one account targeting multiple systems.

    Jeremiah Holland

      I’m trying to build a couple LEM filters.


      We’ve got 2 different filters we need to make, to accomplish the following….


      * Failed login attempts of multiple accounts, in a short period of time, on one device.

      * Consecutive access denied on multiple devices from a single account (local or domain).


      Could anyone recommend how we can build those out?