create alert for bad password / account locked

create alert for bad password / account locked

Hi, we need to create email alert when a users account is locked.

I got stucked and dont get any mails.

loggs:

User Name Client IP Address Client Host Name Domain Controller Logon Time Event Type Failure Reason Analyzer Details Message
NNN 10.64.234.49 Z128134.domain.com s0514 Mar 27,2025 09:17:14 AM Failure Account disabled, expired, or locked out Details Kerberos pre-authentication failed for NNN from Z128134.domain.com. Status : Failure. Failure Reason : Account disabled, expired, or locked out. . Error : Account disabled, expired, or locked out

Configuration Alerts: