RSA Admin

Report - UNIX Login attempts

Discussion created by RSA Admin Employee on Sep 4, 2009

Hi,

 

I'm a newbie to enVision.

 

I need to generate report for successful and failure SSH login attempts for UNIX systems. I've modified the existing report like below,

 

DeviceAddress in (select paddr from device_list where dtype=31) AND Type = 22 OR Agent = 'sshd'

 

The original report was to generate report for Super User Access and it was like,

 

DeviceAddress in (select paddr from device_list where dtype=31) AND MessageID IN ('00008','00008:01')

 

But when I run the report, I got only failed attempts. Please help me...

Outcomes