Envision: Alerts firing for fields that should not match watchlist
2 years ago
Originally Published: 2009-09-14
Article Number
000045257
Applies To
enVision
Issue
Stop alerts from firing when, for example, username is not in watchlist
Cause
Watchlists will match if the name in the watchlist is a subset of the name in the event message if Regex is turned on.
Resolution
Disable Regex if the watchlist contains an exact match for the field.  i.e. use UserName instead of UserID if the watchlist does not contain the windows domain\username and only contains the username.