Showing results for 
Show  only  | Search instead for 
Did you mean: 

create an alarm to track useracc

HI Could someone please guide me in creating an alarm to track user activity. Currently I have created a watchlist with the list of user account. The current alarm that I set up sends an email but does not state what activity was performed or what account triggered the alarm.
1 Reply

Re: create an alarm to track useracc

I recommend reading this:

But basically if you already created the alarm, you need to edit the template.

I suggest you to take a screenshot of the event's information. The name of the fields you want to include on the mail.

  1. After you know what you want to report, go and edit your alarm.
  2. On Actions > Send Message Configure> Templates.
  3. Add a new template and edit as you want.
  4. Use the information you took earlier and click the little star to insert all the fields that you want, it will be replaced with the information of the event.

The repeating blocks will help you with correlated events

Alarm: [$Alarm Name]
Assignee: [$Alarm Assignee]
Trigger Date: [$Trigger Date]

Summary: [$Alarm Summary]

Source User: [$%UserIDSrc]
Source IP: [$Source IP]

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community