create alert for bad password / account locked
Hi, we need to create email alert when a users account is locked.
I got stucked and dont get any mails.
loggs:
User Name Client IP Address Client Host Name Domain Controller Logon Time Event Type Failure Reason Analyzer Details Message
NNN 10.64.234.49 Z128134.domain.com s0514 Mar 27,2025 09:17:14 AM Failure Account disabled, expired, or locked out Details Kerberos pre-authentication failed for NNN from Z128134.domain.com. Status : Failure. Failure Reason : Account disabled, expired, or locked out. . Error : Account disabled, expired, or locked out
Configuration Alerts:
