The EventSentry dashboard includes the generic "Search" tile, which can be used to display data from any page in the web reports, e.g. event log data. The Search tile also offers the ability to extract select data (strings) from events and display them in custom columns. This method can be applied to any type of event logged to the event log.
Here we will extract the following data from 4625 events:
Follow the steps below to setup the new tile:
Logon\sType\:\s(.+) .* .* .*Security\sID\:(.+) .*Account\sName\:(.+) .* .* .* .*Failure\sReason\:(.+) .* .* .* .* .* .*Caller\sProcess\sName\:\s(.+) .* .* .*Workstation\sName\:\s(.+) .*Source\sNetwork\sAddress\:\s(.+)
When configured properly and data present, the dashboard tile should look similar to what is shown below: