Pulling AD Lockout Alerts via PowerShell Script in LM | Product Discussions

Rosario_Gambard · 2021-09-30T17:47:38Z

Greetings, We are transitioning from SolarWinds to LM. In SolarWinds via Application monitoring we were running a PowerShell script that generated alerts on locked out Service Accounts from a specific OU. I initially created an Event Source to alert on Security Event ID 4740 with a corresponding Alert rule but it alerts me on all accounts. I have the PS script that if ran solo will pull the information I'm looking for but I would like to integrate it into LM Alerting and not to sure how to. We are fairly new to the product. Any Help would be appreciated.

MoreDiscussions

Pulling AD Lockout Alerts via PowerShell Script in LM | Product Discussions | LogicMonitor Community