How to omit User Account Locked Out events from reports
In order to exclude all "User Account Locked Out" events from reports in Netwrix Auditor, perform the following steps:
- Navigate to the Netwrix Auditor installation folder
- Open the
unomitproplist.txtfile - Remove the
*.lockoutTimeline OR just add#to the beginning of the line (for example,#*.lockoutTime) - Save the file