I have this trigger {Servername:eventlog[Security,,,,4634|4625|4672|4798|4624|4648|4776].logeventid(4624)}=1,
which shows "An account was successfully logged on." I would like it to show
"The {username} was successfully logged on. {ip}".
How do I do it?
Comments
Post a Comment