Table of Contents
- Introduction
- System Requirements
- Assign Service Logon As Credentials
- Server Configuration
- Agent-Based Monitoring
- Azure Relay Hybrid Connection
- Account Lockout Monitoring and Reporting
- Data Providers
- Directory Services
- Hosts
- Templates
- Template Properties
- Batch Update Templates
- Log Management Templates
- File and Directory Monitor Templates
- Windows Monitor Templates
- Account Lockout Monitor Template
- Logon Monitor Template
- CPU Monitor Template
- Memory Monitor Template
- Disk Space Monitor Template
- SMART Monitor Template
- Process Monitor Template
- Service Monitor Template
- Performance Counter Monitor Template
- Active Directory User Monitor Template
- Active Directory User Integrity Monitor Template
- Task Scheduler Template
- Clock Synchronization Template
- Defragment NTFS Disks Template
- Network and Application Monitor Templates
- SSL Certificate Monitor Templates
- Email Monitor Templates
- SNMP Monitor Templates
- Monitor Hierarchy
- Reports
- Auto-Configurators
- Options
- Actions
- Filters
- Schedules
- Shared Views
- General Executable Properties
- Assign Actions
- Assign Directories
- Assign Disks
- Assign Shares
- Assign Files
- Assign Consolidated Logs
- Assign Event Logs
- Assign Active Directory Audit Logs
- Target Files and Sub-Directories
- Define Log Entry Columns
- Define Log Entry Columns with Regular Expressions
- Define CSV and W3C Log Entry Columns
- Active Directory User and Group Filters
- Explicitly Assigned Logs
- Report Columns
- Report Date/Time Ranges
- Report Security Event Log Filters
- SNMP
- SSH Shell
- Exporting and Importing Configuration Objects
- Command Line Interface
- Troubleshooting
- Terminology
Logon Monitor Template
The Logon Monitor Template enables you to get notified when specific users or users in a specific group logon or fail to logon. This template is typically used by systems administrators that want to be notified when specific users attempt to login or successfully login. This template uses WMI to either subscribe to or scan the Security Event Log.
How to configure the Logon Monitor Template:
- From the Menu Bar, select File | New. The Create New Object View displays.
- From the Create New Object View, expand Templates | Windows Monitors then select Logon Monitor. The New Template Properties View displays.
- The Template Properties view contains 3 tabs.
The Options Tab
- Use the Level drop-down to choose between Success Audit and Failure Audit events.
- Use the Event IDs check boxes to select the specific Event IDs to monitor.
- Use the Logon Types check boxes to select the logon types to monitor.
-
Finally, select the General Tab, then click the click the
Auto-Generate Name
button to
auto-generate a name based on the configured settings.