has anyone created an alert using XiQ to warn when a certain IP address or MAC address appears on the network. I can't find one in the default alerts, if anyone would be kind enough to share.
I can´t say for sure but maybe this could be done forwarding to XIQ an event triggered by UPM (universal port feature) and configuring the appropriate alert for your use case. I would research UPM in your case.
Bar, You can do that quite easily with a notification on Control if the MAC appears on an authenticated port. Without authentication it becomes tricky. Mig