cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
Splunk1
Engager
Member since: ‎12-21-2020
‎12-22-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎12-21-2020
Activity Feed
View All

Re: Creating an alert for service account log in

by in Alerting
‎12-21-2020 11:59 AM
‎12-21-2020 11:59 AM
So I can do something like this: source="WinEventLog:Security" EventCode="4624" user="svc_account" src!="Server1" OR "Sever2" OR "Server3"   ... View more

Creating an alert for service account log in

by in Alerting
‎12-21-2020 08:45 AM
‎12-21-2020 08:45 AM
Hi, We have a service account svc_account, that should log into certain servers (Server1, Server2, Server 3). How would we create an alert to notify if svc_account logs into a server other than Server1, Server2, Server 3? Thank you for your help.  ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎12-22-2020 04:21 PM
Karma given to
View All