Is there any way to remove failed CIFS events out of the event logs ?
when i run event log show i get a lof of CIFS login errors.
ERROR secd.cifsAuth.problem: vserver (vs1) General CIFS authentication problem. Error: User authentication procedure failed
CIFS SMB2 Share mapping - Client Ip = 10.xx.xx.xx
[ 0 ms] Login attempt by domain user 'Lxxxxxxxxx3\Administrator' using NTLMv2 style security
[ 0] Using a cached connection to lxxxxxxxx3.ap.xxxxx.com
[ 2] Authentication failed with DC LXXXXXXXX3. Not retriable. (Status: 0xc0000064)
[ 2] Login attempt by local user 'LXXXXXXXXX3\Administrator' using NTLMv2 style security
**[ 2] FAILURE: CIFS authentication failed
Details
Event:
secd.cifsAuth.problem: vserver (vs1) General CIFS authentication problem. Error: User authentication procedure failed CIFS SMB2 Share mapping - Client Ip = 10.xx.xx.xx [ 0 ms] Login attempt by domain user 'LXXXXXXXX3\Administrator' using NTLMv2 style security [ 0] Using a cached connection to lxxxxxxx3.ap.xxx.xxx [ 2] Authentication failed with DC Lxxxxxxxx3. Not retriable. (Status: 0xc0000064) [ 2] Login attempt by local user 'LXXXXXXXX3\Administrator' using NTLMv2 style security **[ 2] FAILURE: CIFS authentication failed
Message Name:
secd.cifsAuth.problem
Sequence Number:
273996
Description:
This message occurs when a CIFS authentication attempt fails for any reason other than an unknown user name or bad password.
Action:
Examine the failure details to determine corrective action. Common failures include the inability to communicate with domain controllers, NIS servers, or LDAP servers due to connectivity or configuration problems.
We get our support desk to login and check of there are errors and there are lots of these
Any ideas how to remove these ?
can i edit the event catalog and change this to an Alert ?
Message Name: secd.cifsAuth.problem
Severity: ERROR
Description: This message occurs when a CIFS authentication attempt fails for any reason other than an unknown user name or bad password.
Corrective Action: Examine the failure details to determine corrective action. Common failures include the inability to communicate with domain controllers, NIS servers, or LDAP servers due to connectivity or configuration problems.
SNMP Trap Type: Severity-based
Is Deprecated: false