Re:
On Jan 20, 2014, at 7:16 AM, Johnson, Tracy wrote:
> I just noticed if a an "INVALID LOGON" is recorded in the System Logs, it doesn't show in LOGTOOL:
>
For me, I see the "invalid password" message recorded in the system log as a "CONSOLE LOG" event.
Do you have CONSOLE LOG enabled?
(Logging item 115 ... use our free SYSLOG utility to see/change what's getting logged.)
Stan
>
>
> ===================================================================================================================================
>
> FRI, JAN 17, 2014 2:40 PM LOG2122.PUB.SYS SYSTEM (PIN 2676) CONSOLE LOG
>
> (OUTPUT)14:40/2676/INVALID PASSWORD FOR "HMPT,READONLY.MMV090,PUBAS" DURING LOG
>
> ON ON
>
> USER: MANAGER GROUP: PUB ACCOUNT: SYS
>
> JSNAME:
>
>
>
>
>
> It seems there is is place for it, after ON ON (looks like there is a blank spot for it there) but it doesn't get recorded.
>
See the following CONSOLE LOG line, with something like:
LDEV #4. (js 65)
Here's the pair of log messages an invalid logon generated for me:
===============================================================================
TUE, JAN 21, 2014 12:58 PM LOG0744.PUB.SYS SYSTEM (PIN 81)
CONSOLE LOG
(OUTPUT)12:58/81/INVALID PASSWORD FOR "STAN.SIELER,SOURCE" DURING LOGON ON
USER: MANAGER GROUP: PUB
ACCOUNT: SYS JSNAME:
===============================================================================
TUE, JAN 21, 2014 12:58 PM LOG0744.PUB.SYS SYSTEM (PIN 81)
CONSOLE LOG
(OUTPUT) LDEV #4. (js 65)
USER: MANAGER GROUP: PUB
ACCOUNT: SYS JSNAME:
===============================================================================
Stan
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|