Hello Forum, Does anybody know of a way for PA Server Monitor to monitor specific Windows security log event ID's? I am looking to be notified when user account passwords are changed. I would like an alert whenever there is an event ID 4723, 4724 or 4738 in the Security log. Any tips or tricks will be greatly appreciated!

Thank you

asked 01 Jun '18, 15:34

Dave's gravatar image

accept rate: 50%

Hi Dave,

The best way to monitor log files for specific event IDs is to use the Event ID & Text Filters at the Event Source level. Here are some link that you show you how to use that feature. On the page of the second link you will also find a video to watch.

Event Log Monitor

How to Audit Windows Logons and Logon Failures


Please make sure to mark your questions accepted when you have your answer by clicking the gray check mark to the left of the answer.


answered 04 Jun '18, 09:14

Quinn's gravatar image

Quinn ♦♦
accept rate: 35%

You might also want to take a look at the Active Directory Login monitor to make this even easier still.


answered 04 Jun '18, 11:44

Doug's gravatar image

Doug ♦♦
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported



Asked: 01 Jun '18, 15:34

Seen: 2,036 times

Last updated: 04 Jun '18, 11:44