Why log "failed log in"?

[Anna_Ushakova]

Why log "failed log in"? this happened after the transition from 80.10 to 80.20.

[Nüüül · Accepted solution]

For example for security reasons. when this is coming up more often you might want to know, that there is something going on. When using it, a SIEM system could correlate with other logs and trigger actions as response for anomalies, if such has been detected.

Next, for Troubleshooting, i.e. users are not able to log in. You might want to know when and so...

If a user comes up to you, that he is not able to log on, you might want to see the login attempt and i.e. the entered username

The log message existed at 80.10 too.