Login failures (SMFLOGN)

If you want to log an SMF record when the server processes a login failure, check the box labeled "Login failures (SMFLOGN)".

You may record Type 118 or Type 119 records for the login failure events. Type 119 provide more information, including information related to IPv6. Type 119 records are recommended.

You may check both "Type 118" and "Type 119" to log both record types, however, this is not recommended due to performance implications.

If you select to use Type 118 records, you can modify the subtype. The default subtype is 72 and can also be specified as STD. The subtype for Type 119 records is 72 and cannot be changed.