09-20-2023 09:53 AM
hi,
do we have a way to associate failed logins with an event? Mail Notification for example.
The Authentication LOG shows Failed for Username and IP. I can't find any way in GUI and CLI to associate an action with this.
How do you handle it?
THX!!
09-20-2023 10:42 PM - edited 09-20-2023 10:43 PM
This section in the User Guide has some details: Configuring Restrictive User Account and Passphrase Settings
09-22-2023 06:10 AM
THX good hint for me,
if the valid number of login attempts is exceeded (Local User Account & Passphrase Settings) then the account will be locked and the Alert Recipients will receive an info about it.
The account must be unlocked via another account (ADMIN). At least something.
Another solution is to use SYSLOG to evaluate the "LOGIN" LOG for Failed via other mechanisms and then generate an action.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide