# VPN Connection Alerts

**URL:** <https://discuss.elastic.co/t/vpn-connection-alerts/302457>\
**Category:** Elastic Observability\
**Created:** [April 14, 2022, 4:59pm UTC](https://discuss.elastic.co/t/vpn-connection-alerts/302457 "2022-04-14T16:59:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rwilson](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@rwilson](https://discuss.elastic.co/u/rwilson)\
**Post date:** [April 14, 2022, 4:59pm UTC](https://discuss.elastic.co/t/vpn-connection-alerts/302457/1 "2022-04-14T16:59:10Z")

</div>

Good morning,

I am trying to configure an alert to email admins whenever there is a new user connecting to a VPN.  
I am fairly new to the Elastic platform and need some assistance in creating these alerts.  
The only pre-built alert I see is for MacOS.

Any help on this is greatly appreciated.

---

<div class="post-metadata">

**Author:** ![grfneto](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/grfneto/32/125776_2.png) [@grfneto](https://discuss.elastic.co/u/grfneto)\
**Post date:** [April 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/vpn-connection-alerts/302457/2 "2022-04-14T17:31:10Z")

</div>

Hi @rwilson

Are you collecting VPN access logs with some beat?

There are many modules in filebeat that can help you in this connection log collection. Once the log is in your Elasticsearch, you can create alerts via Watcher using kibana:

[Watcher | Kibana Guide [8.1] | Elastic](https://www.elastic.co/guide/en/kibana/current/watcher-ui.html#watcher-ui)

Best regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 8:35am UTC](https://discuss.elastic.co/t/vpn-connection-alerts/302457/3 "2022-11-04T08:35:09Z")

</div>