Missing Event Log Entries

Puck · Post by **Puck** » Thu Aug 03, 2006 7:23 am

I have a question about the Even Log monitoring. I have a test to monitor the security log for all failed logins with a 5 minute interval. The problem I am seeing is that I only receive an alert on the last entry in that min 5 windows. If there were 10 failed logins I only receive a notice on the last one. How can I make sure I get a notice for ALL failed logins regardless of the testing interval?

Puck · Post by **Puck** » Thu Aug 03, 2006 7:28 am

Ok, I found the answer in the documentation "Report about all “Bad” events"

Thanks

KS-Soft · Post by **KS-Soft** » Thu Aug 03, 2006 9:13 am

Correct.
And most likely you need to set "Repeat: until status changes" option for the action.

Regards
Alex