Operator Login/Authentication LoggingΒΆ
StarlingX logs all operator login and authentication attempts.
For security purposes, all login attempts (success and failure) are logged. This includes the Horizon Web Interface logins, SSH logins, Local Console Logins and internal database login attempts.
The logs include the timestamp, user name, remote IP Address, and number of failed login attempts (if applicable). They are located under the /var/log directory, and include the following:
/var/log/auth.log
/var/log/horizon.log
/var/log/pmond.log
/var/log/hostwd.log
/var/log/sysinv.log
/var/log/user.log
/var/log/ima.log
You can examine the log files locally on the controllers.
