RSA Admin

Create alert within working time

Discussion created by RSA Admin Employee on Jan 21, 2013
Latest reply on Jan 22, 2013 by RSA Admin

I would like to monitor our system with condition:

If there are no authentication log (success or fail) in working time (<7h and >19h) => alert

I try to create filter but it not allow to set filter with "event time" like this.

How can I create alert with this condition?

Outcomes