Zurück
-
Titel
Event ID correllation document for out of the box real-time alerts based on the Security log -
Beschreibung
Is there a Quest InTrust document or utility which would allow me to look up real-time monitoring rules that include specific Windows Server Security Event ID?
-
Ursache
N/A -
Lösung
Included with the download package for InTrust is a document called "WindowsAuditingReferences.xls". Upon viewing this document there is tab at the bottom for real-time monitoring. Here you can set column filters for the specific events you are interested in and only the applicable rules will be displayed.
-
Weitere Informationen
Refer to the technical documentation PDF called "InTrust Windows Auditing Reference" for more information.