I have a Fortify 24.2 Lab, the Event Log within the Console does not show failed login attempts, is there a flag we can enable so that it starts logging?
I Have searching in Internal Files but no success
On this file i have researched the event filters that eventlog uses, i add this value on filter, but still no working
./webapps/ssc/WEB-INF/internal/securityContext.xml:328: <bean id="authLoggerListener" class="com.fortify.manager.security.CustomLoggerListener">
<value>org.springframework.security.authentication.event.AuthenticationFailureBadCredentialsEvent</value>
./webapps/ssc/WEB-INF/classes/CoreMessageResources.properties:369:enum.WEBUI_LOGIN_FAILED = User Login Attempt Failed
./webapps/ssc/WEB-INF/config/ssc.properties:30:event.log.security.events = WEBUI_LOGIN_SUCCESS,WEBUI_LOGIN_FAILED,WEBUI_LOGOUT,WEBUI_LOGIN_WITH_NO_ROLE,\
./webapps/ssc/WEB-INF/config/ssc.properties:45:event.log.activityfeed.exclusions = WEBUI_LOGIN_FAILED,WEBUI_LOGOUT,WS_LOGIN_SUCCESS,WS_LOGIN_FAILED,WS_LOGIN_WITH_NO_ROLE,\