Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
psandeep08 Absent Member.
Absent Member.

Active List for Windows Privilged Users

Hi All, we are creating some use cases to monitor the privileged user activities.

I am unable to populate the active list for the privileged users, can some one guide me :-

1) Do I added the active list manually? when am adding the list manually its triggering the rules

2) How should ArcSight updated the event based or filed based?

Labels (2)
1 Reply
skv2 Absent Member.
Absent Member.

Re: Active List for Windows Privilged Users

Initially you will need to populate the list manually . Then a create another rule to monitor any addition to the privileged groups and add it to the existing list automatically .

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.