This alert is triggered if a new user registers on the monitored network and starts using a software service.
Name: New user detected
Type: new objects
Status (default): disabled
“New user *user* (*IP_address*) connected to: *software_service_name* running on server: *IP_address* (*DNS_name*).”
“Usage: *usage* B. User agent: *agent* .”
This alert has no parameters.