Greeting, Would like some advise on how to create a rule in Alerts >
Configure > Rules. I am using SA 10.4. I would like to create a rule
that will trigger an alert, which will send an email to a designated
address, when users with administrator-leve...
Hi Abhisek, An example is the below. Hope it helps. I am using ESA
rules. Apr 6 06:40:55 10.0.0.1 MSWinEventLog,1,Security,71656,Wed Apr 06
06:40:54
2016,4625,Microsoft-Windows-Security-Auditing,company\admin,N/A,Failure
Audit,company.com.sg,Logon,,A...
