pipes_authentication_failed_incrementlogincounter - User failed auth, login counter incremented
This is the documentation for the audit log event pipes_authentication_failed_incrementlogincounter
CEF:0|PhenixID|PAS|6.0.0|pipes_authentication_failed_incrementlogincounter|User failed auth, login counter incremented|4|duser= phxCurrentFailedAuthCounter= phxMaxFailedAuthCounter= phxPipeName= phxTraceId= phxValveIndex= phxValveType=
Authentication failed, lockout counter has incremented
- Severity: 4 NOTICE
Attributes
duser
- Data type: String
The resulting user id for the authenticator
phxCurrentFailedAuthCounter
- Data type: Integer
The current failed auth counter in the login window
phxMaxFailedAuthCounter
- Data type: Integer
The max temporary failed auth counter before temporary lockout
phxPipeName
- Data type: String
The pipe name
phxTraceId
- Data type: String
The trace id of the request
phxValveIndex
- Data type: Integer
The index of the valve inside the pipe
phxValveType
- Data type: String
The valve type