I will admit I am a newbe and I just set up my LEM several days ago. I am getting email alerts on events that were set up automatically by a wizard. One of the rules is an account lockout. I am receiving an email every night about one of my user accounts getting locked out at the same time every night. Here is my question:
How do I go back into the LEM to find the detail on that event? If I am understanding the LEM, the events shown via the filters are events that happened only while I had the LEM open. How do I go back historically and find that event?
Hopefully I am making sense and someone can enlighten me.
Thanks,
Steve