Server Alarms - Avaya Support

LOG-SVN (Login Security Violation)
LOG-SVN (Login Security Violation)
MO Name in Log Alarm Level Initial Command to Run Full Name of MO
LOG-SVN MAJ enable login loginID 1
1. Where loginID is the Avaya services login ID for which the security violation was detected. The Alt Name
field indicates the login ID associated with the security violation and the major alarm.
The Security Violation Notification (SVN) feature provides notification when the number of failed
attempts to access the system administration/maintenance interface meets or exceeds
customer administered threshold parameters.
A major alarm is logged whenever a security violation is detected involving an Avaya services
login ID and that login ID has been disabled as a result of detection of the security violation. The
capability to disable a login ID following detection of a security violation involving that login ID is
administrable on a per login ID basis.
Refer to the Administrator Guide for Avaya Communication Manager, 03-300509, for
information about administration required for the Security Violation Notification feature, and the
option to disable a login ID following detection of a security violation involving the affected
login ID.
Error log entries and recommended actions
Table 260: LOG-SVN Error Log Entries
Error
Type
Aux
Data
Associated
Test
Alarm
Level
On/Off
Board
Login Security Violation
Recommended Action
1–15 None None Major OFF enable login loginID
General Information about log-svn error log entries:
1. The number (1–15), that appears in the Error Type field, corresponds to the location of the
login in the internal login data structure.
2. The Alt Name field on the alarm report indicates the login ID associated with the security
violation and major alarm.
3. These errors/alarms are associated with a number of failed attempts to access the system
management/maintenance interface using an Avaya services login ID that meet or exceed
the customer administered threshold parameters. The associated alarm is immediately
raised as a major alarm.
4. The affected login ID will be disabled as a result of detection of the security violation, unless
it is the system’s last enabled INADS-type login. The provision to disable a login ID following
detection of a security violation involving that login ID is administrable on a login ID basis.
Communication Manager Release 5.0 Issue 4 January 2008 951