Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Making a rule for a 100 logon failures.

$
0
0

To add to what Garreth said, if you want it to be 100 logon failures from the SAME user (not 100 logon failures from anyone), you want to use an Advanced Threshold (hit the little gear button as he pointed out) and specify SAME DestinationAccount.  Otherwise, it's commonly the timeframe that makes these things work or not work.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>