• State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 26 subscribers
  • Views 3314 views
  • Users 0 members are here
Options
Related
This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Cisco Device - User login alert

ajurado

I am trying to setup an alert based on specif user login.  Exam. If user "A" failed or successfully login to specific Cisco device, I would like to be alert on it. If you know how to do this please let me.

Thank you in advance for your help

Parents
  • 0

    Hi,

    Depending on your device, the following should work:

    login on-failure log

    login on-success log

    This will produce the following syslog messages:

    Jun 17 21:25:29.478 MDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: testuser] [Source: 10.1.0.23] [localport: 22] at 21:25:29 MDT Mon Jun 17 2013

    Jun 17 21:26:03.178 MDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: testuser] [Source: 10.1.0.23] [localport: 22] [Reason: Login Authentication Failed] at 21:26:03 MDT Mon Jun 17 2013

    Once you have the syslog messages, you should be able to create an alert to send notifications.

Reply Children
No Data

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.

SolarWinds Customer Success Center Certification Media Vault Link Accounts
About THWACK Blogs For Government Edit Settings Free Tools & Trials
Legal Documents Terms of Use Privacy California Privacy Rights Security Information
©2024 SolarWinds Worldwide, LLC. All Rights Reserved.