戻る
-
タイトル
Event ID correllation document for out of the box real-time alerts based on the Security log -
説明
Is there a Quest InTrust document or utility which would allow me to look up real-time monitoring rules that include specific Windows Server Security Event ID?
-
原因
N/A -
対策
Included with the download package for InTrust is a document called "WindowsAuditingReferences.xls". Upon viewing this document there is tab at the bottom for real-time monitoring. Here you can set column filters for the specific events you are interested in and only the applicable rules will be displayed.
-
追加情報
Refer to the technical documentation PDF called "InTrust Windows Auditing Reference" for more information.