Newly applied Linux Account Management Real-time Monitoring rules for Redhat 6 are not generating alerts (4250541)

Newly applied Linux Account Management Real-time Monitoring rules for Redhat 6 are not generating alerts after installing the InTrust Agent on Redhat 6 as per the following Knowledge Article:

https://support.quest.com/intrust/kb/143351

1. Restart the InTrust agent service on the RHEL 6 server and retest generating an alert:

2. Review the InTrust log from Windows Event Viewer to verify if any warning or errors are being reported when the Agent configuration is being applied to the Redhat server
3. In InTrust Manager, verify the configuration in the following objects:
   1. Configuration | Data Sources | Redhat Linux accounts monitoring
      1. View the Parameters tab of the Properties and confirm the files listed are in the same location as they are on the Redhat server
   2. Real-time monitoring | Policies | Redhat Linux: security
      1. Confirm the Sites tab lists a Site with the Redhat server
      2. Confirm the Rules tab contains the Parent folder or rules for Account Management
   3. Real-time monitoring | Rules | Redhat Linux Security | Administrative activity | Account Management | User account created
      1. Confirm rule is Enabled on General tab
      2. Email is checked on Notifications tab
      3. Confirm "Redhat Linux accounts monitoring is listed on Data Sources tab