0 Replies Latest reply on Feb 8, 2017 12:04 PM by hegemon76

    Deviation Rule Help




      I have my Domain, Schema and Enterprise Watchlists working and want to make sure that if anything is changed (user added or removed from it) I get a notification.


      I believe I have these deviation rule setup correctly however the chance of a change happening is very small so testing it is very limited (no I do not have AD creds to add or remove).


      Any insight would be appreciated thanks! I have an alarm setup based on the Sig ID of this Rule as well.




      Deviation Rule 1.png

      Deviation Rule 2.png