Hi,
We are seeing frequent RTMT alerts with respect to authentication failed, post upgrade to 12.5SU4
Alert:
Number of AuthenticationFailed events exceeds configured threshold during configured interval of time 1 within 3 minutes on cluster.There are 4 AuthenticationFailed events (up to 30) received during the monitoring interval.LoginFrom : 192.168.15.233 Interface : Cisco CallManager Administration UserID : administrator AppID : Cisco Tomcat ClusterID : NodeID : AXNCUCM02 TimeStamp : Mon Mar 14 10:38:03 IST 2022 TimeStamp : 3/14/22 10:38 AM LoginFrom : 192.168.15.236 Interface : Cisco CallManager Administration UserID : administrator AppID : Cisco Tomcat ClusterID : NodeID : AXNCUCM05 TimeStamp : Mon Mar 14 10:38:03 IST 2022 TimeStamp : 3/14/22 10:38 AM LoginFrom : 192.168.15.234 Interface : Cisco CallManager Administration UserID : administrator AppID : Cisco Tomcat ClusterID : NodeID : AXNCUCM03 TimeStamp : Mon Mar 14 10:38:03 IST 2022 TimeStamp : 3/14/22 10:38 AM LoginFrom : 192.168.15.235 Interface : Cisco CallManager Administration UserID : administrator AppID : Cisco Tomcat ClusterID : NodeID : AXNCUCM04 TimeStamp : Mon Mar 14 10:38:03 IST 2022
Please suggest, if cucm is hit by any bug ..
Regards
Jagadish
