We would like to be able to notify on both successful and failed logins on Linux. (Specifically Ubuntu) We see that there is a property in config.xml called "UserLogsIn" and this is exactly what we want to notify on when there is a login. What I have not found is a way to notify on a failed login.
Is there a way to notify for failed Logins? If not, is there a way to notify based on the text "FAILED LOGIN" being added to auth.log? Any help would be appreciated.
Have a number of Ubuntu 16.04 workstations with agent 5.3.3 installed. The daemon starts without error (nothing logged in syslog), but doesn't appear to report back. There are 15 units at this particular site, and only one has reported back since installation. They are all running kernel 4.10.0-42.
I can't find any error messages in the obvious logs (/var/log/syslog - in particular).
Appreciate any direction you can offer.
Is there a way of making new notification in the WebApp. I see in the configuration file in my linux machine there is notification rules, but it will be nice if I can change them in the webapp?
Also I have noticed that I do not have in the WebApp menu Server Admin? I have only System from I can see my 2 machines?