Skip to main content
kvoegele
New Member
July 2, 2015
Solved

Drilling down on the 'Alert message console'

  • July 2, 2015
  • 1 reply
  • 5545 views

Hey Guy's,

 

I am noticing consistent attempts to log into our device from our wan link (shown by the alert message console widget). I have not been able to figure out how to drill down and look at the IP that is trying to gain access. Any help would be greatly appreciated. 

 

For now I have blocked all telnet and ssh attempts to the wan link and have the https access limited to static public IP's.

 

Thanks in advance!

    Best answer by AtiT

    Hello,

    I think it should be logged under Event log -> System.

     

    See the attached screenshot.

    1 reply

    AtiT
    AtiTAnswer
    New Member
    July 9, 2015

    Hello,

    I think it should be logged under Event log -> System.

     

    See the attached screenshot.

    kvoegele
    kvoegeleAuthor
    New Member
    July 9, 2015

    Thanks for your help. You are correct I just need to add the 'login' filter.