2 Replies Latest reply on Dec 28, 2012 9:48 AM by avjana

    In Mcafee SIEM how can i create the alarms based on two fields matching


      I am working on creating the alarms if the condition match for particular User with specific signature..  Iike example i want to know when an account "test" got locked out.. and send the email notification.

      As of now i can create alarms only for the user account or Signature ID ..  i appreciate any suggestion to accomplish this task.. Thanks in advance....