Add event log check to alert on new users

Can I set up an event log check to be alerted when a new user account has been created on our servers?

Yes, you will be instantly notified when a new user is created on any of your servers by adding an event log check. Please follow the below steps:
  1. Provide a display name for identification purposes
  2. Mention the below specifications for the following fields:
  • Log Rule Type: Windows
  • Event Log Type: Security
  • Event Severity: Information
  • Event ID: 4720
  • Source: Microsoft-Windows-Security-Auditing
Save the changes. This will ensure you are alerted when a new user account is created.


Related Articles:

    • Related Articles

    • How do I check and reduce unwanted log usage in my account?

      Log Usage Summary   Log Usage Summary refers to the total space consumed by the AppLogs in Site24x7. You can check Total log usage Daily Usage (represented with date) Log usage by Servers (represented in MB), and Log usage by Log Types (represented ...

    • Troubleshooting tips for log collection errors

      The following is a list of possible log collection errors and the solutions to fix them: Error message Reason Solution Upload Limit Reached You might have reached the maximum upload limit configured for this log type in the current billing cycle. ...

    • What to do if I create a new Site24x7 account by mistake even though my organization has an existing account?

      When your organization already holds an existing  account in Site24x7 and you create a new one by mistake, you can follow these steps: Terminate your Site24x7 account. Terminate your newly created organization. Request your admin to add you as a user ...

    • How to limit log uploads from a particular log type?

      Use case: As a sysadmin, you may want to check a specific log type that you upload and manage using Site24x7 AppLogs. Assuming that the upload limit of your account is 100 GB and there are four types of logs managed on a single account, keeping an ...

    • Filtering Windows event logs before uploading

      You can filter Windows event logs in the agent side before uploading them to Site24x7. You can configure to eliminate the unwanted event IDs, so that you can skip them while uploading.  You can set these field configuration while Adding a Log Type, ...