Event filtering
Im wondering if there is a way to do this or if this a planned feature. Basically what I would like to do is in the case of say, failed logins, I want to see if I have 5 failed logins in 15 minutes, but I would like to see this only if all 5 are from the same user. I don't see any option to do this currently. Am I missing this or is this not possible currently?
Topic Participants
eventlog_support
Unluck
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?