Monitoring and reporting for Veeam Data Platform
Post Reply
Mgamerz
Expert
Posts: 160
Liked: 28 times
Joined: Sep 29, 2017 8:07 pm
Contact:

Tons of logon events for veeam one server

Post by Mgamerz »

I've been doing some security checkups and am trying to track down a orphaned service account for something trying to logon from the server veeam one is also running on. I am noticing there is an absolutely huge amount of security events from veeam one for logons. So many so that I can't even fit a full day of logs with the default event log viewer settings. I get 2-3 messages every 2-3 seconds, all the time, and I don't even have veeam one console interface running.

Mainly it is:
- Logon was attempted using explicit credentials
- Account was logged off
- Special privledges assigned

Is there a way this could be cut down? I know this would have to be a technical change on veeam's end as this is not specifically due to veeam but windows logging veeam doing it's thing. Not having 1 full day of logs is annoying - I have a log management program, but it's not as easy to read as windows event viewer (and certainly not as fast).
Shestakov
Veteran
Posts: 7328
Liked: 781 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Tons of logon events for veeam one server

Post by Shestakov »

Hello Mgamerz,
I believe support team can help you with the issue. Please contact them.
By the way, what product version are you at?
Mgamerz
Expert
Posts: 160
Liked: 28 times
Joined: Sep 29, 2017 8:07 pm
Contact:

Re: Tons of logon events for veeam one server

Post by Mgamerz »

I am using Veeam ONE 9.5 Update 3 (9.5.0.3801).

I will contact support and see if there is a way to reduce the number of security events that are being generated.
Shestakov
Veteran
Posts: 7328
Liked: 781 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Tons of logon events for veeam one server

Post by Shestakov »

Once you have a support case number please post it here for future reference. Thanks!
Mgamerz
Expert
Posts: 160
Liked: 28 times
Joined: Sep 29, 2017 8:07 pm
Contact:

Re: Tons of logon events for veeam one server

Post by Mgamerz »

Case is #03109552
Shestakov
Veteran
Posts: 7328
Liked: 781 times
Joined: May 21, 2014 11:03 am
Full Name: Nikita Shestakov
Location: Prague
Contact:

Re: Tons of logon events for veeam one server

Post by Shestakov »

Thank you. I'll keep track of it and chime in if needed.
Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests