[AlertRule_brute_force_user]
Available since Exponential 6.0.15 (in development, not in a release yet).
Summary
The group [AlertRule_brute_force_user] of settings/audit.ini.
File
settings/audit.ini; override it in settings/override/audit.ini.append.php, in a siteaccess or in an extension.
Settings
| Setting | Default | Description |
|---|---|---|
| Class | threshold | Many failed logins for one account, from anywhere. |
| Event | access.session.login.failed | |
| Threshold | 10 | |
| Window | 900 | |
| GroupBy | object.id | |
| Severity | alert | |
| Sinks[] | syslog; mail |
See also
Generated example: audit.ini [AlertRule_brute_force_user]
Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this group. The descriptions are the comment lines of settings/audit.ini.
Contributors
- Graham Brookins Updated
Comments
Add a comment