Netwrix Auditor Integration

Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.

Netwrix Auditor

Version: Netwrix Auditor 9.8 and later

Netwrix Auditor delivers a single console for analysis, alerting and reporting on IT infrastructure changes. The product helps organizations track changes and access events across the IT environment, and provides information as a set of easy-to-read reports. Netwrix Auditor solves security, compliance and operational problems.

Netsurion helps to monitor events from Netwrix Auditor. Its dashboard, alerts, and reports will help you track Authentication Activities and any other actions, to keep you informed. It will trigger alert whenever user tries to authenticate and fails, or any configuration action is successful.

After Netwrix Auditor is configured to deliver events to Netsurion manager, alerts, dashboards, and reports can be configured into Netsurion.

Some of the Data Source Integrations available in Netsurion are listed below.

Alerts

Type	Name	Description
Security	Netwrix Auditor - Successful configuration activity	This alert is triggered when a successful configuration is detected in Netwrix Auditor.
Security	Netwrix Auditor - User login failed	This alert is triggered when a user login failure is detected in Netwrix Auditor.

Reports

Type	Name	Description
Security	Netwrix Auditor - Failed user login activities	This report gives information about all the user login failure detected in Netwrix Auditor. Report contains username, domain name, IP address, application name, etc.
Security	Netwrix Auditor - Successful configuration activities	This report gives information about all the successful configuration detected in Netwrix Auditor. Report contains username, object name, domain name, etc.
Compliance	Netwrix Auditor - Failed configuration activities	This report gives information about all the failed configuration activities detected in Netwrix Auditor. Report contains username, object Name, domain name, etc.
Compliance	Netwrix Auditor - Successful user login activities	This report gives information about all the user successful login activities detected in Netwrix Auditor. Report contains username, domain name, IP address, application name, etc.

Documentation

The configuration details are consistent with Netsurion version 9.3x and later, and Netwrix Auditor 9.8 and later.

Download Integration Guide and How-to Guide for more information and to configuration instructions.