ssh login attempts alarm trigger

[nczaw]

Hi all,

I want to trigger ssh login attempts in cisco/ fortigate. Anyone have some simple template or how can i trigger for this alarm.

Thanks all.

[dimir]

Check out this post: https://www.zabbix.com/forum/zabbix-...login-attempts

[vijayk]

Hi all,

I want to trigger ssh login attempts in cisco/ fortigate. Anyone have some simple template or how can i trigger for this alarm.

Thanks all.

As dimir suggest.

You can configure the syslog server in zabbix server or separate. In my case I have installed rsyslog with zabbix server. My switch device logs are saved in /var/logs/messages.
Configure the item as

Type: Zabbix Agent(active)
key: log[/var/log/messages,"Failed password",,100] (Replace the "Failed password" with your device return message)