So I finally got it to work.
I thought I'd put a monitor on the user's last connected time, to make sure they just don't frop off.
That works fine other than the last contact time in the email message is in the internal format.
User state changed from No state to Warning |
Severity level Warning:
* Last contact time = 1241792222 (No state, Warning) Threshold rule settings:
Is there any way to change that to display human readable date/time?