Demand test descriptions and error codes - Avaya Support

LOG-SVN (Login Security Violation)
MO Name in Log Alarm Level Initial Command to Run Full Name of MO
LOG-SVN MAJ enable login loginID 1
1. Where loginID is the Avaya services login ID for which the security violation was detected. The Alt Name
field indicates the login ID associated with the security violation and the major alarm.
The Security Violation Notification (SVN) feature provides notification when the number of failed
attempts to access the system administration/maintenance interface meets or exceeds
customer administered threshold parameters.
A major alarm is logged whenever a security violation is detected involving an Avaya services
login ID and that login ID has been disabled as a result of detection of the security violation. The
capability to disable a login ID following detection of a security violation involving that login ID is
administrable on a per login ID basis.
Refer to the Administering Avaya Aura Communication Manager (03-300509), for information
about administration required for the Security Violation Notification feature, and the option to
disable a login ID following detection of a security violation involving the affected login ID.
Error log entries and recommended actions
Table 164: LOG-SVN Error Log Entries
Error
Type
Aux
Data
Associated
Test
Alarm
Level
On/Off
Board
General Information about log-svn error log entries:
1. The number (1–15), that appears in the Error Type field, corresponds to the location of the
login in the internal login data structure.
2. The Alt Name field on the alarm report indicates the login ID associated with the security
violation and major alarm.
3. These errors/alarms are associated with a number of failed attempts to access the system
management/maintenance interface using an Avaya services login ID that meet or exceed
the customer administered threshold parameters. The associated alarm is immediately
raised as a major alarm.
4. The affected login ID will be disabled as a result of detection of the security violation,
unless it is the system’s last enabled INADS-type login. The provision to disable a login ID
following detection of a security violation involving that login ID is administrable on a login
ID basis.
580 Maintenance Alarms for Communication Manager, Media Gateways and Servers
Login Security Violation
Recommended Action
1–15 None None Major OFF enable login loginID