|
Hello Forum, Does anybody know of a way for PA Server Monitor to monitor specific Windows security log event ID's? I am looking to be notified when user account passwords are changed. I would like an alert whenever there is an event ID 4723, 4724 or 4738 in the Security log. Any tips or tricks will be greatly appreciated! Thank you |
|
Hi Dave, The best way to monitor log files for specific event IDs is to use the Event ID & Text Filters at the Event Source level. Here are some link that you show you how to use that feature. On the page of the second link you will also find a video to watch. How to Audit Windows Logons and Logon Failures Thanks Please make sure to mark your questions accepted when you have your answer by clicking the gray check mark to the left of the answer. |
|
You might also want to take a look at the Active Directory Login monitor to make this even easier still. |
