Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: LEM Retention Alerting?

$
0
0

I was just passing through while looking for another post - but I noticed this was not answered....but being a month old, you may have already found the answer elsewhere, but just in case....

You could use other Fields, I used the Examples provided above.

I used the InternalInfo Event Type, then the EventInfo Field looking for *8%*  (to answer your syntax question akak925).

(The Second Line is not needed).

 

In Action:


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>