Syslog messages
A.3 List of Syslog messages
SIMATIC RF360R
Configuration Manual, 03/2022, C79000-G8976-C629-02
107
Unsuccessful logon attempts
Message text
{Protocol}: User {User name} account is locked for {Time minute} minutes after {Failed login count}
unsuccessful login attempts.
Example
WBM: User admin account is locked for 544 minutes after 2 unsuccessful login attempts.
Explanation
With too many failed logon attempts, the corresponding user account is locked for a specific time.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.11
Session lock
Message text
{Protocol}: The session of user {User name} was closed after {Time second} seconds of inactivity.
Example
WBM: The session of user admin was closed after 310 seconds of inactivity.
Explanation
The current session was locked due to inactivity.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.5
Limiting the number of simultaneous sessions
Message text
{Protocol}: The maximum number of {Max sessions} concurrent login session exceeded.
Example
WBM: The maximum number of 10 concurrent login sessions exceeded.
Explanation
The maximum number of simultaneous sessions has been exceeded.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.7
Nonrepudiation
Message text
{Protocol}: User {User name} has changed configuration.
Example
OPC: User unknown has changed configuration.
Explanation
User has changed the entire configuration. User could not be found. The "unknown" user is always
output.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.12
Message text
{Protocol}: User {User name} has changed {Config detail} configuration.
Example
OPC: User admin has changed Power configuration.
Explanation
User has changed specific configuration.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 2.12