cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post

SFTP Monitoring

Does Solarwinds have the ability to monitor SFTP connections for persistent failed logins and once those are seen send out an alert?  I have done some quick looking and really can't find anything SFTP related.  This is for audit purposes so I am hoping there are people out in ThwackLand that can assist.  Thanks - Dave

0 Kudos
1 Reply

I'm imagining that you would just end up doing a log file monitor against wherever your SFTP solution records failed attempts.  This is a case I like to punt to the SIEM if one is available, but if no better tool is available this template would generally be able to do the job.

https://documentation.solarwinds.com/en/Success_Center/SAM/Content/SAM-Log-Parser--PowerShell--sw504...

 

- Marc Netterfield, Github
0 Kudos