IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Exception Rule alert for 3 different users login failure

    Posted 07/25/23 07:28 AM

    Hi Everyone,

    Very urgent requirement.

    I have created an alert for an exception rule for 3 login failures in a minute  - Alert triggered for the same user,

    My criteria is to create an alert for 3 login failure in a minute for any DB User - Not working out, 

    If the login failure for the same user, it is working.

    Had anybody came across this scenario?

    How can get an alert for 3 different DB login failures in a minute? if it works, which failed user login alert will be alerted via email?



    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: Exception Rule alert for 3 different users login failure

    Posted 07/25/23 08:53 AM

    Hi PHANENDRA ,

    Can you try to create a rule with below criteria. you can also select EMAIL (instead syslog) as a notification type and get the alert. so  , you check whether the rule is working or not. 



    ------------------------------
    Akash Parmar
    ------------------------------