Home› Event Rules

How to attach a user name to a banned IP

jstarkweatherjstarkweather Posts: 3 Newbie
edited January 2017 in Event Rules

I am trying to set up an alert that would send an email with the user name and the Banned IP. I have been unable to find a rule that can pull both. I can get a user name and a failed logon attempt but cannot get a user name when an IP gets banned. I am running v7.2.2.6 in a 2 node HA cluster. Thanks in advance for any help.

Comments

  • cjirkacjirka Posts: 6 Resident

    I think you could probably pass %CONNECTION.REMOTE_IP% to the Security - Failed Logins report and send the results via email. I haven't tested but it "should" work.

Sign In or Register to comment.