IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
Back to discussions
Expand all | Collapse all

Finding the Log Source That Lock Domain User

  • 1.  Finding the Log Source That Lock Domain User

    Posted 12/24/19 08:49 AM
    Edited by Halil BALIM 12/25/19 01:31 AM
    Hi,

    I have a domain user to add log sources. However, Lastly, domain user is repeatedly locked out.

    I want to see the log sources that is entered wrong password (probably, for this reason)

    Also, I have looked the DC events, and degrade the results with two wincollect server (via Caller Computer Name column)

    Do you have any idea how to find the log sources?

    Thanks a lot


Related Content