F5CAB4: BIG-IP Administration Control Plane Administration

By F5 · Question Mode

QuestionQ11

List which log files could be used to find events and/or hardware issues

A BIG-IP Administrator suspects that unauthorized SSH login attempts have occurred on the BIG-IP system.

Which log file contains details of those attempts?

Explanation

SSH authentication and authorization events, including failed or denied SSH login attempts, are recorded in /var/log/secure on a BIG-IP system. F5 training guidance for testing denied SSH connections specifically directs administrators to monitor this file.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!