Hi,
I am trying to create alert for user locked in LDAP.
Is there a way to do so in SPLUNK? I am aware about WINEVENT , but that is not required.
Please assist.
Thanks,
@renjith.nair