Analyzing the AuthorisationLog Database Table

All authorization failures are logged in a database table called the AuthenticationLog. The following are the rows of interest on this table:

Table 1. Contents of the Authentication Log

Field

Meaning

timeEntered

The timestamp of the entry in the log.

userName

The username associated with the authorization attempt.

identifierName

The security identifier (SID) or functional identifier (FID) associated with the failure.

The LogAdmin API can be used to query the AuthorisationLog database table. The Java documentation for this class should be referenced for further details.