RSA Admin

Converting Report into Alert - Password Resets

Discussion created by RSA Admin Employee on Oct 29, 2008

I'm hoping that someone can help me. I've created a Windows report that shows when a password has been reset by someone other than the user. i.e. EventUser NOT IN (UserID) UserID is a field in the mesage text

This works well.  Now I want to covert that into an alert - via manage views, but I'm having problems telling the envision filter that I'm looking for field UserID and not string UserID.

Does anyone know how I do this?  I would be very grateful if someone could help - thanks in advance