Video Screencast Help

Sophos login test failure not reflected

Created: 15 Jan 2013 | 3 comments

I managed to receive the logs from Sophos from Database server.

Steps mainly comprises of

  1. Downloading jdbc into SSIM
  2. SSIM Sophos setting(password, database name, URL, directory of where JDBC is)
  3. Event query
  4. Logs from Sophos s1 and s2

My problem is when i do a login test failure on the database name. It is not reflected on the event query, Only information about the collector is grab.

Any reason, this is so?

Comments 3 CommentsJump to latest comment

alvingarlic's picture

Hi

I did a fail log-in on the database pointed/set by URL in SSIM(sophos). SSIM did not capture the event except constant collector updates