Add event log check to alert on new users

Can I set up an event log check to be alerted when a new user account has been created on our servers?

Yes, you will be instantly notified when a new user is created on any of your servers by adding an event log check. Please follow the below steps:
  1. Provide a display name for identification purposes
  2. Mention the below specifications for the following fields:
  • Log Rule Type: Windows
  • Event Log Type: Security
  • Event Severity: Information
  • Event ID: 4720
  • Source: Microsoft-Windows-Security-Auditing
Save the changes. This will ensure you are alerted when a new user account is created.


Related Articles:

    • Related Articles

    • How do I check for and reduce unwanted log usage in my account?

      Log Usage Summary The Log Usage Summary refers to the total space consumed by AppLogs in Site24x7. You can check the: Total log Usage. Daily Usage (represented with dates). Daily Usage by Servers (represented in gigabytes). Daily Usage by Log Types ...

    • Filtering Windows event logs before uploading

      You can filter Windows event logs in the agent side before uploading them to Site24x7. You can configure to eliminate the unwanted event IDs, so that you can skip them while uploading. You can set these field configuration while Adding a Log Type, or ...

    • Troubleshooting tips for log collection errors

      The following is a list of possible log collection errors and the solutions to fix them: Error message Reason Solution Upload Limit Reached You might have reached the maximum upload limit configured for this log type in the current billing cycle. ...

    • Adding sub-users to your Site24x7 account

      As the Super Admin/Admin of your Site24x7 account, you will be able to invite and add a user to be part of your Site24x7 account. When the primary Site24x7 account holder adds a sub-user, a Site24x7 account will be automatically created for that ...

    • How to collect Applications and Services Logs from Windows event logs

      Site24x7 AppLogs uses the Windows Management Instrumentation (WMI) query on the Site24x7 Server Monitoring agent to fetch event logs. The WMI module requires the registry entry below to read the event logs from the Applications and Services Log ...