Each evening we have MANY automatically closed alerts starting at 4am.
I have not been able to determine what monitor has been set to automatically close these. Many are Account Locked out messages. Its this an out of the box configuration of the management packs?
What is the AUTO RESOLVE?
Alert: Account Locked
Source: Servername.domain.nam
Path:
Last modified by: Auto-resolve
Last modified time: 2014-04-17 4:01:05 AM
Alert description: Event Description: A user account was locked out.
Subject:
Security ID: NT AUTHORITY\SYSTEM
Account Name: SERVERNAME$
Account Domain: DOMAINNAME
Logon ID: 0x3e7
Account That Was Locked Out:
Security ID: Server\Administrator
Account Name: Administrator
Additional Information:
Caller Computer Name: WORKSTATION_A
Alert view link: "?DisplayMode=Pivot&AlertID=%7bd67d0b7c-9f22-42a2-beb1-47ed77aa0bc9%7d"
Notification subscription ID generating this message: {689B747A-AAD7-033A-7F72-6F9E42F54558}
Thx,
Joe
Thx, Joe