UCSM Syslog - User authentication

[srashidi]

We configured syslogs on UCSM to monitor who logs in to UCSM and monitor remote users. 

We receive logs for first time login but we don't receive logs if same user logs in with another browser, basically no logs if user has active UCSM session.

Also we don't receive logs if user tries to login with wrong password. failed authentication not even logs in Tech-support in "sam_techsupportinfo "

1, How can we configure UCSM to timeout the user in certain time ?

2. What do we need to configure to receive all login and authentication failure activities ?

[srashidi]

First time login creates below syslog, once same XXXX user attempting to login to UCSM not creating any syslog

Jun 15 11:08:48 UCSM-a 2017 Jun 15 20:08:45 CEST: %AUTHPRIV-5-SYSTEM_MSG: New user added with username XXXXXX - securityd