nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Message Center shows this every 5 mins post upgrade 'User DOMAIN\ServiceAccount made an unsuccessful attempt to login from a SolarWinds Information Service endpoint.'

lloyd267

Since we upgraded to 2023.2.0 we can see this constant message appearing every 5 minutes in the Message Center 'User DOMAIN\ServiceAccount made an unsuccessful attempt to login from a SolarWinds Information Service endpoint.'

I cannot find what is causing it, but looking at the latest release notes for 2023.3 I can see one of the fixes states "The issue where unsuccessful login attempts generated by the SolarWinds Platform occurred on the SQL Server was addressed."

Could this be the same thing?

Many thanks

Find more posts tagged with

swis

orion

solarwinds

upgrade

2023.2.0

Accepted answers

All comments

larryhuffman

Yes it is the same thing, and I can verify that upgrading to 2023.3 does not fix the issue.

jsotopian

We recently upgraded to 2023.2.2 and are also seeing this unsuccessful login attempts on both the DB and the IIS services. Did you find a fix for it?

keoki

We upgraded to 2023.3.1 and are now experiencing this issue as well.

lloyd267

Check your SWIS logs, we noticed some API pollers were causing it, the problematic API pollers were setup up to poll solarwinds infratrucuture with a SWQL query

lloyd267

Check your SWIS logs, we noticed some API pollers were causing it, the problematic API pollers were setup up to poll solarwinds infratrucuture with a SWQL query

Shooty

Hi, I have the same issue and support confirmed its a known issue in 2023.2

They recommended upgrading to 2023.3 or 2023.3.1 to resolve

rahulkudesia

I am still facing this on v2023.4.2.

Anyone got solution for this one?

jsotopian

Changing the credentials to UPN format, such as swi-db@domain.local, fixed it for us.

jnkp

We're currently in 2024.2 and is still experiencing this. I'll try to investigate and give an update here.