All,
I was searching the logs, but could not find any logging info for logins to the JSS thru the Webapp
Our JSS accounts are tied to LDAP accounts, and suddenly an admin's (that is known to have higher JSS access) domain account kept locking out, and initial signs are that someone may have been trying to access the account with a wrong password until it locked out.
What i'm looking for is there anything in the JSS that logs all JSS access and attempts, and where the access attempt came from (IP or Machine name)
If anyone knows, please point me in that direction, otherwise its SPLUNKing for me..
thanks,
M
