https://community.hpe.com/t5/operating-system-linux/failed-login/m-p/4902786#M45630 figured it out. Wed, 18 May 2005 22:04:01 GMT K.C. Chan 2005-05-18T22:04:01Z https://community.hpe.com/t5/operating-system-linux/failed-login/m-p/4902785#M45629 getting message from message log. This user failed to login at the console (not via ssh). There should be some sort of tty device name in place of null. I noticed this yesterday, any idea why?<BR />FAILED LOGIN 1 FROM (null) FOR bob<BR /><BR /><BR />Thanks. Wed, 18 May 2005 21:14:41 GMT https://community.hpe.com/t5/operating-system-linux/failed-login/m-p/4902785#M45629 K.C. Chan 2005-05-18T21:14:41Z https://community.hpe.com/t5/operating-system-linux/failed-login/m-p/4902786#M45630 figured it out. Wed, 18 May 2005 22:04:01 GMT https://community.hpe.com/t5/operating-system-linux/failed-login/m-p/4902786#M45630 K.C. Chan 2005-05-18T22:04:01Z