IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Finding the Log Source That Lock Domain User

  • 1.  Finding the Log Source That Lock Domain User

    Posted Tue December 24, 2019 08:49 AM
    Edited by Halil BALIM Wed December 25, 2019 01:31 AM
    Hi,

    I have a domain user to add log sources. However, Lastly, domain user is repeatedly locked out.

    I want to see the log sources that is entered wrong password (probably, for this reason)

    Also, I have looked the DC events, and degrade the results with two wincollect server (via Caller Computer Name column)

    Do you have any idea how to find the log sources?

    Thanks a lot


Related Content