
Syslog Messages
D.3 Explanation of the messages
RTU303xC
Operating Instructions, 06/2019, C79000-G8976-C382-06
381
Identification and authentication of human users
Message text
{Protocol}: User {User name} logged in from {IP address}.
Example
WBM: User admin logged in from 192.168.0.1.
Explanation
Valid login information that is specified during login.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.1
Message text
{Protocol}: User {User name} failed to log in from {IP address}.
Example
WBM: User admin failed to log in from 192.168.0.1.
Explanation
Incorrect user name or password specified during login.
Severity
Error
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.1
Message text
{Protocol}: User {User name} logged out from {IP address}.
Example
WBM: User admin logged out from 192.168.0.1.
Explanation
User session completed - logged out.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.1
Message text
{Protocol}: Default user {User name} logged in from {IP address}.
Example
WBM: Default user admin logged in from 192.168.0.1.
Explanation
The standard user has logged in to the WBM with "admin"/"admin".
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: n/a (NERC-CIP 007-R5)
User account management
Message text
{Protocol}: User {User name} has changed the password.
Example
WBM: User admin has changed the password.
Explanation
User has changed own password.
Severity
Notice
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.3
Message text
{Protocol}: User {User name} has changed the password of user {Destination user name}.
Example
WBM: User admin has changed the password of user user1.
Explanation
User has changed the password of another user.
Severity
Notice