Answer the question
In order to leave comments, you need to log in
Why does the trigger fire only once?
Hello.
You need to monitor Event Windows Security with ID 4768.
Created an Item with the key - eventlog[Security,,,,^4768$,,skip]
Trigger -
logeventid(/Event User Log/eventlog[Security,,,,^4768$,,skip],,"4768")=1 and nodata(/Event User Log/eventlog[Security,,,,^4768$,,skip],2s)=0
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question