Tons of logon events for veeam one server

Monitoring and reporting for Veeam Backup & Replication, VMware vSphere and Microsoft Hyper-V

Tons of logon events for veeam one server

Veeam Logoby Mgamerz » Wed Jul 18, 2018 3:37 pm

I've been doing some security checkups and am trying to track down a orphaned service account for something trying to logon from the server veeam one is also running on. I am noticing there is an absolutely huge amount of security events from veeam one for logons. So many so that I can't even fit a full day of logs with the default event log viewer settings. I get 2-3 messages every 2-3 seconds, all the time, and I don't even have veeam one console interface running.

Mainly it is:
- Logon was attempted using explicit credentials
- Account was logged off
- Special privledges assigned

Is there a way this could be cut down? I know this would have to be a technical change on veeam's end as this is not specifically due to veeam but windows logging veeam doing it's thing. Not having 1 full day of logs is annoying - I have a log management program, but it's not as easy to read as windows event viewer (and certainly not as fast).
Mgamerz
Enthusiast
 
Posts: 38
Liked: 5 times
Joined: Fri Sep 29, 2017 8:07 pm

Re: Tons of logon events for veeam one server

Veeam Logoby Shestakov » Wed Jul 18, 2018 4:15 pm

Hello Mgamerz,
I believe support team can help you with the issue. Please contact them.
By the way, what product version are you at?
Shestakov
Veeam Software
 
Posts: 5860
Liked: 503 times
Joined: Wed May 21, 2014 11:03 am
Location: Prague
Full Name: Nikita Shestakov

Re: Tons of logon events for veeam one server

Veeam Logoby Mgamerz » Thu Jul 19, 2018 9:11 pm

I am using Veeam ONE 9.5 Update 3 (9.5.0.3801).

I will contact support and see if there is a way to reduce the number of security events that are being generated.
Mgamerz
Enthusiast
 
Posts: 38
Liked: 5 times
Joined: Fri Sep 29, 2017 8:07 pm

Re: Tons of logon events for veeam one server

Veeam Logoby Shestakov » Fri Jul 20, 2018 12:41 pm

Once you have a support case number please post it here for future reference. Thanks!
Shestakov
Veeam Software
 
Posts: 5860
Liked: 503 times
Joined: Wed May 21, 2014 11:03 am
Location: Prague
Full Name: Nikita Shestakov

Re: Tons of logon events for veeam one server

Veeam Logoby Mgamerz » Fri Jul 20, 2018 2:35 pm

Case is #03109552
Mgamerz
Enthusiast
 
Posts: 38
Liked: 5 times
Joined: Fri Sep 29, 2017 8:07 pm

Re: Tons of logon events for veeam one server

Veeam Logoby Shestakov » Sat Jul 21, 2018 9:17 pm

Thank you. I'll keep track of it and chime in if needed.
Shestakov
Veeam Software
 
Posts: 5860
Liked: 503 times
Joined: Wed May 21, 2014 11:03 am
Location: Prague
Full Name: Nikita Shestakov


Return to Veeam ONE



Who is online

Users browsing this forum: No registered users and 3 guests