Detect logon activity from multiple geo locations
I'm trying to detect logon activity for a user account from multiple Geo countries. I have currently created a lightweight rule to populate an active list to maintain a table with username, country.
I have also got a 2nd rule which looks at the active list and see if username is equal and Source Geo Country Name is not equal to that in the active list. But it doesn't trigger..
Help is much appreciated.
User (key field) , country
Then use rule to pupulate that list.
Than create rule that should wait for system event of Active list update entry. there are fields under device custom strings, that hold information regarding old and new fields of Your active list. Compare these two fields and thats it.
I believe you have missed below one or more
Active list key filed
No data in the active list.
Rules don't trigger
Your purpose is detecting login activity from multiple Geo locations. So can you explain your 2nd rule? I'm bit confused with it.