CMS USER LOGGED IN UNSUCCESSFUL
-
Code: 119
-
Brief Description: CMS User Login Unsuccessful
-
Provided Information:
-
IP Address of the user
-
Role of the user
-
Realm – Local or LDAP
-
Failed at timestamp
-
Reason
-
Username
-
Detailed Message
-
-
Sample log message:
-
CEF format
Jul 20 03:37:31 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.3.0|119|CMS User Login Unsuccessful|5|src=10.16.6.4 role=Super Admin realm=LOCAL failed_at=20 Jul 2020 07:38:20 AM UTC reason=Invalid username or password. [email protected] msg=User [email protected] failed in authentication.
-
CEF - Fixed Key Definition format
Sep 7 09:42:17 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.4.0|119|CMS User Login Unsuccessful|5|cs1Label=src cs1=10.16.6.4 cs2Label=role cs2=Super Admin cs3Label=realm cs3=LOCAL cs4Label=failed_at cs4=07 Sep 2020 01:43:45 PM UTC cs5Label=reason cs5=Invalid username or password. cs6Label=username [email protected] cs7Label=msg cs7=User [email protected] failed in authentication.
-