mxadmin logging in.

[dale wheatley]

Hi all,

My Systems Insight Manager has been setup for a few months but just a couple days aho I have been getting an alert that I included below. I'm not sure why this is happening all of a sudden. I get two logins messages, then 2 logout messages about an hour later. Please let me know what this is all about. Thanks in advance. -- Dale

The alert is below:
============

Event Name: Successful Login
Event originator: ntfp2
Event Severity: Informational
Event received: 04-Sep-2006, 11:47:58
Event description: Successful Login

Security Event Details
User Name: ntfp\mxadmin
IP Address: 127.0.0.1
Device Name: 127.0.0.1

[LukaS_9]

Hi,
maybe someone have changed the SIM login events settings...
From SIM menu, select Options-->Security-->Login Event Settings.
Probably the option selected is "All login and logout activities", or someone have change it for just a while.

regards
Luca

[dale wheatley]

Yes, log all login and logoff events is selected, but I'm still curious what mxadmin is. I didn't have this problem before and this program is logging into my server daily around lunch time.

[brandonlong · Accepted solution]

mxadmin is an account within SIM that is used for back end functions.
It looks like a scheduled task has been setup to run at the same time every day and mxadmin is logging into the system to perform the task. You would probably need clarification on what task is being performed though, regrettably I don't have that.

[JL123]

Hi,

I have the same problem on my server, does anyone know what this mxadmin is? Or what the task is?

[marsh_1]

hi,

check in your hp sim audit log to see what tasks mxadmin is logging in and doing. it could be discoveries or status polling.
tasks --> view hp sim audit log.


HTH

[JL123]

Thanks for the response.
Here are a few logs from the mxadmin that I can see.

145788: 2009-02-16 09:57:07 EST,CONFIG,SUCCESS,START,TASK,Hardware Status Polling - 311758_server.domain.com,SUMMARY,mxadmin,0,1312854,
145789: 2009-02-16 09:57:09 EST,CONFIG,SUCCESS,START,TASK,Hardware Status Polling - 311759_server.domain.com,SUMMARY,mxadmin,0,1312862,


149563: 2009-02-16 10:29:22 EST,SESSION,SUCCESS,LOGOUT,USER,Logout (127.0.0.1),NOTE,mxadmin,,,

146017: 2009-02-16 09:58:45 EST,SESSION,SUCCESS,LOGIN,USER,Successful Login (127.0.0.1),NOTE,mxadmin,,,