Viewing Failed Password Log-in Attempts

Security monitoring for all layers (Infrastructure, Service Enclave and Compute Enclave) can be viewed in Grafana.

To view logs that include security notifications:

• Log into Grafana (https://grafana.pca-name.domain).

• Go to the Explore context.

• Choose the Loki data source.

From that data source, choose the infrastructure or software component to view information. The various components can be filtered using log labels. For example:

• Management and compute nodes, use the host filter, such as {host="pcamn01"}

• Oracle ZFS Storage Appliance, use {log="audit"}

• Compute Enclave, use {log="api-server"}

Some components cannot be monitored at this tier:

• Switches (Spine, Leaf and Management)

• ILOM

If audit logs are required for those components, log directly into the component.

For more information about how to use Grafana, see "Using Grafana" in the Status and Health Monitoring chapter of the Oracle Private Cloud Appliance Administrator Guide.