Alerting

Set up password change alert to email targeted user

eric_daoust
New Member

I am looking into ways to pull alerts for events 4723 and 4724 then send an email to the targeted user who's password was changed. 

My experience with Splunk is limited, as i can get a generic alert set up to email me when it see's one of those event id's but that's it.

What I want:

Monitor for password changes

Send an email to the user in question telling them that their password was changed (by themselves (4723)or by an admin(4724)

The email would include the name of admin who changed it or just the user's display name with a generic message saying password was changed.

I have the Splunk Supporting Add-on for Active Directory modeule which i am guessing would help?

 

Thanks

 

 

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

See if this helps: https://community.splunk.com/t5/Reporting/Send-emailed-results-to-an-email-address-IN-the-results/m-...

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...