Examples of User Activity Rules

The following are some examples of how to configure user activity rules.
Objective
Criteria
Value
Send an alert if any user downloads more than 500 files in a day.
Activity
Count/Frequency
Target Type
Action
Download
500, 1 day
File
Send Admin Alert
Send an alert for failed logins on Salesforce.
Activity
Cloud Apps
Action
Failed Login
Salesforce
Send Admin Alert
Log any activity from a malicious IP address.
Activity
IP Address
Action
Any Activity
127.31.52.12
Log only
Send an alert if a user outside of paloaltonetworks.com uploads an executable file.
Activity
Domain
Target Name
Target Type
Action
Upload
Any Domain Except paloaltonetworks.com
*.exe
File
Send Admin Alert
Log an activity when users change their passwords.
Activity
Target Type
Action
Edit
Password
Log only

Related Documentation