donelofson1

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2012-11-07
17:14
170 views
Admin Login
I am trying to find a failed login attempt by a local administrator to our ArcSight L3400's Web interface but am having difficulties doing so. I can find valid login attempts, but not invalid with a wrong user name or password.
Thank you!
1 Reply
A-Aron

Micro Focus Expert
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2012-11-07
19:05
Hi Don-
Try searching for this
deviceEventClassId=platform:201
And see if that gets you what you want...
Regards,
Aaron