How to attach a user name to a banned IP
I am trying to set up an alert that would send an email with the user name and the Banned IP. I have been unable to find a rule that can pull both. I can get a user name and a failed logon attempt but cannot get a user name when an IP gets banned. I am running v188.8.131.52 in a 2 node HA cluster. Thanks in advance for any help.