Security Compliance

Unexplained log in failure or object access events from SEM

Logon failure or object access events are being recorded that appear to be coming from the SEM or an account that the SEM is using.

First published date

11/1/2018 4:58 PM

Last published date

5/28/2019 7:30 PM

Overview

Log in failure or object access events are being recorded that appear to be coming from the Security Event Manager (formerly Log & Event Manager) or an account that the SEM is using.

Product section

Security Event Manager

Cause

The issued is caused by an incorrectly configured connector or backup task.

Resolution

Check that the credentials being used for each of the following are accurate and have good passwords:

Directory Service Query Connector. See Set up Active Directory authentication in SEM or Set up Active Directory authentication in LEM 6.3.0 and older .
Email Active Response Connector. See Configure the Email Active Response Connector.
Archiveconfig, backupconfig, or logbackupconfig tasks. See Configure Backups on your SEM Appliance .

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.