Smarter windows event log monitoring

[kantill]

I need to be able to monitor windows event logs but I want only to alerted when the error happens more than three time in a set time limit. So I.E. if a user types in the wrong password once or twice no action but if somebody is trying to hack the system send me an email.

Thanks for the help

[burtininkai]

Hi,

Try to use MIN and MAX for trigger expression, this isn't 100 % accurate, but still gives You much more filtered information.