How to find the username of a rejected login

[Jiri Pik]

How can I find in the tomcat logs the username who somebody tried unsuccessfully to log in for a security audit?

Is there any special field I should add to the logs?

[Shannon S · Accepted solution]

Hello Jiri,

Nice to hear from you again!

You can enable user access logging to obtain the IP and username of any failed login attempts. My colleague Branno does a better job of explaining this on the thread below:

• Log IP and Username of every failed/successful login in Confluence

Go ahead and give that a try, and let me know if you have any problems.

Regards,

Shannon

[Jiri Pik]

THANK YOU

[Shannon S]

You're welcome, Jiri!

I hope this helps but do let me know if you have any questions.

Shannon

[Jiri Pik]

@Shannon S :

What are the instructions for the same for JIRA?

[Shannon S]

Hi Jiri, 

It looks like Jira has a security log that you can use to find those details:

• How to find IP of failed login attempts 

I'm not as familiar with Jira as I am with Confluence, so if you have any trouble with that feature on Jira, I would say raise a new question in the Jira collection and the Community can give you a hand.

Shannon

[Jiri Pik]

@Shannon S

THANK YOU