📄️ How to Get Single Alert on Mass Objects Modificati
Shows how to configure an alert threshold in Netwrix Auditor so a single alert triggers for mass object modifications, such as deleting a folder that contains many files.
📄️ How to remove footer from real-time alert emails
Shows how to remove the footer text from real-time alert emails by editing the registry and setting the ShowReportFooter DWORD value to 0.
📄️ How to use SMS(Text) for alerts
Describes how to configure Netwrix Auditor to send alerts via SMS by using carrier-specific email-to-SMS gateways and lists common carrier formats for the US and Canada.
📄️ Logs to Collect for Netwrix Auditor SMS Alert Issu
If Netwrix Auditor sends email alerts but not SMS, collect the AlertsSender verbose logs and the NwArchiveSvc logs as described so Netwrix Support can troubleshoot SMS alert delivery.
📄️ Setting up Account Lockout Alert
Shows how to set up a real-time alert to detect account lockouts in Active Directory using Netwrix Auditor. Includes steps to configure filters and notification email.
📄️ The best way to find the Attribute Name when confi
Shows how to find the exact attribute name (PropNameInt) for configuring Real Time Alerts in Netwrix Auditor by querying the NetWrix Active Directory SQL database.
📄️ Unable to create real-time alerts
When creating real-time alerts, Kerberos UDP packets may be fragmented and dropped, causing errors. This article explains how to force Kerberos to use TCP by editing the registry to resolve the issue.
📄️ Why I Get Alerts on Accounts That Cannot Be Locked
Netwrix Auditor may generate alerts when Windows records lockout events even if an account cannot actually be locked. This article explains why Event ID 4740 triggers alerts and how to view the related activity record.