Quantcast
Channel: THWACK: All Content - Server & Application Monitor
Viewing all articles
Browse latest Browse all 12281

Alert Reporting on an Event

$
0
0

Hi,

 

I need to create a report for Windows Logon Failure event 529 (Windows 2003) that runs and create a report every morning. As a test, currently I'm using an Application monitor template (Win Server 2003 AD Security) monitoring a Domain controller. It works and I can see how many time the event 529 occurred in a day. I can open up each event occurrence to see who and when the logon failure took place. (NPM console,Top ten Components by Statistic Data\Logon Failure: Unknown username or password).

 

Instead of checking from the console each day, how can I extract this information into a report? This kind of information is useful to find out who was trying to log on and failed in the night in exceeding number of trying. And if the account was already disabled.

 

Thanks,

Loc


Viewing all articles
Browse latest Browse all 12281

Trending Articles