Hello,
I am monitoring Windows eventlogs for security event ID 4625 (failed logins). I successfully receive messages from my trigger upon a failed login but it seems like the problem stays open forever. Until closed, no new failed logins will trigger.
Furthermore it makes no sense for me to receive a recovery push message, since I only want to know if there was a failed login. "Resolving" the failed login makes no sense to me.
Does anyone have an idea how to automatically close the problem and not send a push message?
Thanks in advance.
I am monitoring Windows eventlogs for security event ID 4625 (failed logins). I successfully receive messages from my trigger upon a failed login but it seems like the problem stays open forever. Until closed, no new failed logins will trigger.
Furthermore it makes no sense for me to receive a recovery push message, since I only want to know if there was a failed login. "Resolving" the failed login makes no sense to me.
Does anyone have an idea how to automatically close the problem and not send a push message?
Thanks in advance.