Other Usage

Why are there multiple authentication failures from Unix source for an account?

pagnihot
Path Finder

Dear All

I agree that this may not be the right forum to post this.

There are a lot of authentication failures for some accounts and the sources are two Linux servers. Checked with the user, they didn't enter incorrect credentials these many times. For sure, this is some process or job. However, I would like to understand why are these attempts failing. And if these are counted as failed attempts, why these attempts don't lock out the account (considering we have an account lock-out policy)

Can someone help me to understand how are these attempts generated?

Labels (1)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...