Smart Plug-in for WebLogic Server Reference Guide

Chapter 1
Metric B085_InvLoginAttCnt
1-69
Metric B085_InvLoginAttCnt
Monitor Template Name WLSSPI_0085
Metric Name Invalid Login Attempts Count
Metric Type Alarming, Graphing
Description Number of invalid login attempts.
WebLogic 6.0/6.1 or Both Both
Severity: Condition Minor: WLSSPI-0085.1, threshold 2
Collection Interval 5m
Message Group WebLogic
Message Text WLSSPI-0085.1: # of invalid login attempts (<$VALUE>) too high
(>=<$THRESHOLD>)
Instruction Text The number of invalid login attempts has exceeded the threshold value.
Probable cause: This could be an attempted security breach.
Potential impact: If the security breach is successful, the security of the
WebLogic Server environment could be compromised.
Suggested action: If the invalid login attempts is repeated frequently, you may
wish to implement the weblogic.security.audit package. This will allow you to
review the audit records to determine if there has been a security breach or an
attempted security breach.
Action Operator-initiated graph
Area Security