Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Windows Server Login Alert

$
0
0

I could make one that looks like that!

 

First, you'd need a new e-mail template, probably something like:

 

User $DestinationAccount has attempted to login to server $DestinationServer.

The login attempt was $Result.

 

Then you'd need two rules, one for successes (based off correlating UserLogon events) and one for failures (based off correlating UserLogonFailures).

 

Rule A would have a text constant to populate $Result = "successful" and Rule B would have a text constant to populate $Result = "unsuccessful"


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>