Does Solarwinds have the ability to monitor SFTP connections for persistent failed logins and once those are seen send out an alert? I have done some quick looking and really can't find anything SFTP related. This is for audit purposes so I am hoping there are people out in ThwackLand that can assist. Thanks - Dave
I'm imagining that you would just end up doing a log file monitor against wherever your SFTP solution records failed attempts. This is a case I like to punt to the SIEM if one is available, but if no better tool is available this template would generally be able to do the job.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.