Syslog messages
C.2 Syslog messages
SIMATIC CC7
Operating Instructions, 10/2019, C79000-G8976-C503-02
145
SE_DEFAULT_USER_AUTHENTICATION_USED (protocol)
Message text
{Protocol}: Default user {User name} logged in from {IP address}.
Example
Console: Default user <user name> logged in from 192.168.0.1.
Explanation
Default user has logged in via the IP address.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: n/a (NERC-CIP 007-R5)
C.2.3
Account management
SE_ACCESS_PWD_CHANGED_(protocol)_(own password)
Message text
{Protocol}: User {User name} has changed the password.
Example
Console: User admin has changed the password.
Explanation
User has changed own password.
Severity
Notice
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.3
SE_ACCOUNT_NAME_CHANGE_(protocol)_(user)
Message text
{Protocol}: Default user account was changed to {User name}.
Example
Console: Default user account was changed to <new user>.
Explanation
The default account was changed.
Severity
Notice
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.3
C.2.4
Unsuccessful login attempts
SE_ACCOUNT_LOCKED_TEMP_(protocol)_(User)
Message text
{Protocol}: User {User name} account is locked for {Time minute} minutes after {Failed login
count} unsuccessful login attempts.
Example
Console: User admin account is locked for 544 minutes after 2 unsuccessful login attempts.
Explanation
After too many failed login attempts, the corresponding user account is locked for a specific time.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.11
