Configuration File [Alert]

WebsiteFailedLogins will only alert when a threshold has been met or exceeded. The following are methods in which alert are generated and the format of the alert data.

[Alert] Method

Three alert methods are available to choose from. While stdout is always used, one can use both Smtp and WinEvent, just one, or none.

Smtp - Sends alert via SMTP (email). Has ability to ingest a credential file to enable authenticated SMTP. This can be useful when integrating with ticketing systems or even monitoring stand-alone systems. See configuration settings for details.
WinEvent - Writes an event to the Windows Application event log. This option is useful when integrating with centralized log collection though my require modifying log shipping policies. See configuration settings for details.
Standard Out (stdout) - This option is always enabled. Since an object is returned it allows one to build a wrapper that can take action on the alerts.

Example Value

Method = WinEvent

Method = Smtp,WinEvent

Method = none

[Alert] DataType

The message data of an alert can be formatted three different ways to make integration easier. Choose one.

text - each key value pair is printed on a line as key = value.
xml - hashtable is serialized to xml. To deserialize the xml back into a hashtable by using [System.Management.Automation.PSSerializer]::Deserialize($obj).
json - hashtable is serialezed to json using ConvertTo-Json. Use ConvertFrom-Json to consume the json object.