You are viewing limited content. For full access, please sign in.

Question

Audit Trail Session Log On Failure

Audit Trail

Updated March 6, 2017

asked on February 28, 2017

I am trying to see the Log On failures in Audit Trail. I have turned on Session Failure for the Everyone group in the Admin Console, logged a few failures by attempting to login with an invalid password, waited 24 hours, checked the log and nothing is showing up in the logs. Nothing is logged with the value Succeeded? False

What action writes a Succeeded? False event to the session log? Is a 9010 event (invalid username or password) not a sufficient login failure?

1 0

Replies

replied on March 6, 2017

I did get 9010 errors to log a failure.

I am now wanting to know specifically what log on failures audit trail logs. For example, it does not log an attempt to login with an unknown username. I also does not log a failed attempt if the username is an Active Directory account.

0 0

You are not allowed to follow up in this post.

Sign in to reply to this post.

Asked February 28, 2017
Updated March 6, 2017
220 views