Siemens SIMATIC RF185C - Page 205

Syslog messages
B.3 List of Syslog messages
SIMATIC RF185C, RF186C, RF188C, RF186CI, RF188CI
Operating Instructions, 04/2020, C79000-G8976-C512-03
205
Unsuccessful logon attempts
Message text {Protocol}: User {User name} account is locked for {Time minute} minutes after {Failed login
count} unsuccessful login attempts.
Example
WBM: User admin account is locked for 544 minutes after 2 unsuccessful login attempts.
Explanation With too many failed logon attempts, the corresponding user account is locked for a specific time.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.11
Session lock
Message text
{Protocol}: The session of user {User name} was closed after {Time second} seconds of inactivity.
Example
WBM: The session of user admin was closed after 310 seconds of inactivity.
Explanation
The current session was locked due to inactivity.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.5
Limiting the number of simultaneous sessions
Message text
{Protocol}: The maximum number of {Max sessions} concurrent login session exceeded.
Example
WBM: The maximum number of 10 concurrent login sessions exceeded.
Explanation
The maximum number of simultaneous sessions has been exceeded.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.7
Nonrepudiation
Message text
{Protocol}: User {User name} has changed configuration.
Example
OPC: User unknown has changed configuration.
Explanation User has changed the entire configuration. User could not be found. The "unknown" user is al-
ways output.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.12
Message text
{Protocol}: User {User name} has changed {Config detail} configuration.
Example
OPC: User admin has changed Power configuration.
Explanation
User has changed specific configuration.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.12