Failed Login Check
This Check scans the secure.log file, failing where the number of failed to authenticate user messages in the previous 24 hours exceeds the threshold value.
Where a Check is added or edited the new settings are downloaded to the Agent the next time it communicates back to the Dashboard and applied when the Check runs after that.
The Failed Login Check was previously known as the Hacker Check with this renamed in Dashboard v5.44.5 to more accurately reflect the Check's function.
Dashboard Check configuration
Add
- Select the workstation in the north pane of the Dashboard
- Go to the Checks tab
- Add Check
- Choose Add DSC > Failed Login Check
- OK to save and apply
Edit
- Select the workstation in the north pane of the Dashboard
- Go to the Checks tab
- Select the target Failed Login Check
- From the Check drop-down
- Edit Check (also available from the Check's right-click menu)
- Edit the Threshold value
- OK to save and apply
Delete
- Select the workstation in the north pane of the Dashboard
- Go to the Checks tab
- Select the target Failed Login Check
- From the Check drop-down
- Delete Check (also available from the Check's right-click menu)
- Enter the password you have logged into the Dashboard under to confirm removal
- OK to delete