Use the Send Email Message action in LEM rule creation

Use the Send Email Message action to create a rule. Before you add an action, perform the following steps:

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. On the LEM toolbar, navigate to Build > Rules.

  3. In the Refine Results search field, enter user account lockout.

  4. In the Rule Templates grid, locate the User Account Lockout template.

  5. Next to the template, click , and then select Clone.

  6. Edit the rule Correlations as required, and then click Save.

Add or edit a Send Email Message action

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. On the LEM toolbar, navigate to Build > Rules.

  3. To create a new rule, click in the Rules toolbar.

  4. Expand the Actions list.

  5. Drag Send Email Message into the Actions box.

    If you make a mistake, or decide you want to clear out the actions and start over, hover over any action and click X or click Undo.

  6. From the Email Template drop-down list, select your template.

    If you forgot the name, you can always go back to Build > Groups to view your template details. Your rule will still be open when you come back to Build > Rules.

  7. From the Recipients drop-down list, select the users who need to be notified about this event.
  8. Populate the Send Email Message action with dynamic values from the event firing the rule.
    1. Locate the Event or Event Group that contains your desired action. In this example, the User Account Lockout (Updated) Rule uses the UserDisable event. Expand Events on the components pane and type UserDisable in the search box.
    2. Click the Event to populate its available fields in the Fields listing under the Events listing.
    3. From the Fields listing, drag the appropriate fields into the Correlations box.

      For example, the Email Template created in the related articles below require the following fields: DetectionTime for the Time variable, SourceMachine for the Machine variable, DestinationMachine for the DC variable, and DestinationAccount for the Account variable.

  9. Select the Enable check box.

    After you enable the rule, you can also use the Test check box to place your rule in Test Mode. When a test rule fires, InternalTestRule events display in the console to verify the trigger and actions, but no action is taken.

  10. To save your changes, click Save.

    Activate Rules is enabled in the Rule Creation toolbar. This allows you to batch up all your rule changes in case you want to make multiple changes before changing the running state of the Manager.

  11. Click Activate Rules to send your changes to the LEM Manager and enable your changes.

    Your rule is active and your template is set up.

    The next time your rule fires, the recipients specified in your rule will receive an email that matches your specified format.