Return
-
Title
Event ID correllation document for out of the box real-time alerts based on the Security log -
Description
Is there a Quest InTrust document or utility which would allow me to look up real-time monitoring rules that include specific Windows Server Security Event ID?
-
Cause
N/A -
Resolution
Included with the download package for InTrust is a document called "WindowsAuditingReferences.xls". Upon viewing this document there is tab at the bottom for real-time monitoring. Here you can set column filters for the specific events you are interested in and only the applicable rules will be displayed.
-
Additional Information
Refer to the technical documentation PDF called "InTrust Windows Auditing Reference" for more information.