topic R81 Audit log "WEB_API logged in to WEB_API" events in API / CLI Discussion

R81 Audit log "WEB_API logged in to WEB_API" events

George_Dumitru — Wed, 03 Nov 2021 07:25:26 GMT

Hello,

I've just upgraded our mgmt. servers to R81 and the audit log now contains multiple daily entries for login/logout events by WEB_API Administrator, "WEB_API logged in to WEB_API", login by localhost/logout localhost.

Why are these events generated in R81, I am not using the API at this point.

Thanks,

George

Re: R81 Audit log "WEB_API logged in to WEB_API" events

G_W_Albrecht — Wed, 03 Nov 2021 15:01:50 GMT

I would think that the SMS itself (localhost) is looking for updates all 3 hours...

Re: R81 Audit log "WEB_API logged in to WEB_API" events

SavedByGrace — Fri, 10 Nov 2023 10:34:45 GMT

Since we upgraded our mgmt. server from R80.40 to R81.20 we see this logins every minute! Anyone out there with the same frequency? Is it possible to reduce the frequency?

Re: R81 Audit log "WEB_API logged in to WEB_API" events

PhoneBoy — Fri, 10 Nov 2023 15:37:25 GMT

Please consult with the TAC on this: https://help.checkpoint.com