Hello Forum, Does anybody know of a way for PA Server Monitor to monitor specific Windows security log event ID's? I am looking to be notified when user account passwords are changed. I would like an alert whenever there is an event ID 4723, 4724 or 4738 in the Security log. Any tips or tricks will be greatly appreciated!

Thank you

asked 01 Jun '18, 15:34

Dave's gravatar image

Dave
3639
accept rate: 50%


You might also want to take a look at the Active Directory Login monitor to make this even easier still.

link

answered 04 Jun '18, 11:44

Doug's gravatar image

Doug ♦♦
10.2k122138
accept rate: 21%

Hi Dave,

The best way to monitor log files for specific event IDs is to use the Event ID & Text Filters at the Event Source level. Here are some link that you show you how to use that feature. On the page of the second link you will also find a video to watch.

Event Log Monitor

How to Audit Windows Logons and Logon Failures

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray check mark to the left of the answer.

link

answered 04 Jun '18, 09:14

Quinn's gravatar image

Quinn ♦♦
14.4k3925
accept rate: 35%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×81
×79
×8
×2

Asked: 01 Jun '18, 15:34

Seen: 2,587 times

Last updated: 04 Jun '18, 11:44