Monitoring and reporting for Veeam Backup & Replication, VMware vSphere and Microsoft Hyper-V
Post Reply
Mgamerz
Expert
Posts: 125
Liked: 21 times
Joined: Sep 29, 2017 8:07 pm
Contact:

Tons of logon events for veeam one server

Post by Mgamerz » Jul 18, 2018 3:37 pm

I've been doing some security checkups and am trying to track down a orphaned service account for something trying to logon from the server veeam one is also running on. I am noticing there is an absolutely huge amount of security events from veeam one for logons. So many so that I can't even fit a full day of logs with the default event log viewer settings. I get 2-3 messages every 2-3 seconds, all the time, and I don't even have veeam one console interface running.

Mainly it is:
- Logon was attempted using explicit credentials
- Account was logged off
- Special privledges assigned

Is there a way this could be cut down? I know this would have to be a technical change on veeam's end as this is not specifically due to veeam but windows logging veeam doing it's thing. Not having 1 full day of logs is annoying - I have a log management program, but it's not as easy to read as windows event viewer (and certainly not as fast).

Shestakov
Veeam Software
Posts: 6907
Liked: 700 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Tons of logon events for veeam one server

Post by Shestakov » Jul 18, 2018 4:15 pm

Hello Mgamerz,
I believe support team can help you with the issue. Please contact them.
By the way, what product version are you at?

Mgamerz
Expert
Posts: 125
Liked: 21 times
Joined: Sep 29, 2017 8:07 pm
Contact:

Re: Tons of logon events for veeam one server

Post by Mgamerz » Jul 19, 2018 9:11 pm

I am using Veeam ONE 9.5 Update 3 (9.5.0.3801).

I will contact support and see if there is a way to reduce the number of security events that are being generated.

Shestakov
Veeam Software
Posts: 6907
Liked: 700 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Tons of logon events for veeam one server

Post by Shestakov » Jul 20, 2018 12:41 pm

Once you have a support case number please post it here for future reference. Thanks!

Mgamerz
Expert
Posts: 125
Liked: 21 times
Joined: Sep 29, 2017 8:07 pm
Contact:

Re: Tons of logon events for veeam one server

Post by Mgamerz » Jul 20, 2018 2:35 pm

Case is #03109552

Shestakov
Veeam Software
Posts: 6907
Liked: 700 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Tons of logon events for veeam one server

Post by Shestakov » Jul 21, 2018 9:17 pm

Thank you. I'll keep track of it and chime in if needed.

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests