Search found 4 matches

by gerald
Mon Oct 23, 2006 12:42 pm
Forum: Reports
Topic: Event Viewer (failed login)
Replies: 2
Views: 19337

I am unsure where to put that macro variable. In my HTML log, in the reply field, I only get part of the event's text. For the record, it is Microsoft Event ID 529. The HTML log that Host Monitor creates, cuts off one of the most IMPORTANT parts, the intruder's IP (Network Source Address) I have pla...
by gerald
Mon Oct 23, 2006 6:42 am
Forum: Reports
Topic: Event Viewer (failed login)
Replies: 2
Views: 19337

Event Viewer (failed login)

I have an html log that says what username was tried to log in a server. The Windows server event viewer shows more including the IP of the intruder, but the Host Monitor log cuts off a lot of that info. How can I get the full event text?
by gerald
Fri Oct 20, 2006 8:07 am
Forum: Reports
Topic: Login Failures and Attempts
Replies: 2
Views: 19384

I figured out what was wrong. I had to go into the server's local policy and enable failures. Success was already enabled.

Now I just need to figure out how to see what IP or computer tried to log in. Currently, only the username that was used is logged...
by gerald
Fri Oct 20, 2006 7:46 am
Forum: Reports
Topic: Login Failures and Attempts
Replies: 2
Views: 19384

Login Failures and Attempts

I have a "successful logins" alert set up correctly and it lets me know when people log in to a particular windows server, but when I create one for "login attempts/failures" and I purposely put in a wrong password on a server, it doesn't show up in my log. Just for the record, I...