201 · Question #192
Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?
The correct answer is B. /ver/log/secure. To check for user login attempts to the BIG-IP Configuration utility or other management interfaces, the administrator should examine the /var/log/secure log file.
Question
Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?
Options
- A/var/log/pam/tally/log
- B/ver/log/secure
- C/var/log/trn
- D/var/log/http.d
How the community answered
(40 responses)- A3% (1)
- B88% (35)
- C8% (3)
- D3% (1)
Why each option
To check for user login attempts to the BIG-IP Configuration utility or other management interfaces, the administrator should examine the /var/log/secure log file.
/var/log/pam/tally/log is not a standard BIG-IP log file for general login attempts; PAM tally logs usually track failed login counts.
The /var/log/secure file on a BIG-IP system records security-related events, including user login attempts to management interfaces like the Configuration utility (GUI), SSH, and console. This log provides details about authentication successes and failures for specific users.
/var/log/trn is not a standard BIG-IP log file and does not contain login attempt information.
/var/log/http.d is not a standard BIG-IP log file; HTTP access logs are typically found in /var/log/httpd/access_log or related paths for specific web services, but /var/log/secure is for authentication events to the management UI.
Concept tested: BIG-IP management login log file
Source: https://support.f5.com/csp/article/K16049
Topics
Community Discussion
No community discussion yet for this question.