Audit users logins attempts to Domain Managers

Products

• VMware Smart Assurance
• Network Observability

Issue/Introduction

Audit users logins attempts to Domain Managers

Environment

All Supported Smarts Releases

Resolution

The Smarts Domain Manager log file will log any login attempts which are successful / unsuccessful.

• On a successful attempt, the following log entries will appear as follows:

[<Date & Time>] t@<Epoch> HTTP #3
SYS_MSG-*-LOGIN-Login by <Smarts User> from <Remote Host User>@<Remote Host>[<Remote Host IP>]:<Remote Port> session <Session Number>

• On an unsuccessful attempt, like when an incorrect username or password is entered, these log entries will appear as follows:

[<Date & Time>] t@<Epoch> HTTP #2
AUTH-E-EBADLOGINSYS-Unsuccessful <SYS> login to <Domain Manager Name>: From <Remote Host> IC Console - V<Console Version> pid=<PID> IP=<Remote Host IP>:<Remote Port>

To get detailed information in the server log file on which users and IP addresses are successfully logged in, you may run the following dmctl command:

dmctl -s <Domain> exec dmdebug --clients --output=<output file here>