1 Rookie
•
3 Posts
0
85
February 3rd, 2025 20:10
USR0030 Successfully logged in using "user", from "ip" and REDFISH - why?
Hi All - sorry if this has already been posted. This is my first time in the community. Anyway, our servers in Dell OME are showing multiple entries in the hardware logs for:
Successfully logged in using "user", from "IP" and REDFISH.
Successfully logged in using "user", from "IP" and WS-MAN.
and
LOG007 Audit The previous log entry was repeated 144 times.
Is this normal? And if not, any ideas on how i stop it or slow it down?
Thanks!
No Events found!
DELL-Young E
Moderator
Moderator
•
4.6K Posts
0
February 4th, 2025 01:12
Hello, thanks for choosing Dell and welcome to our community.
I can tell you it is normal.
iDRAC registering all logins from OME, working as designed.
Let us know if you have any additional questions.
https://dell.to/40YwNuV
Respectfully,
royal_wi_2024
1 Rookie
1 Rookie
•
3 Posts
0
February 5th, 2025 19:59
@DELL-Young E Should there be that many logins from OME? It seems like its non stop with Redfish and WS-MAN
DELL-Chris H
Moderator
Moderator
•
9.2K Posts
0
February 5th, 2025 20:10
What you are seeing is from the health check. What you can do though is either make it query less often, or the iDRAC has a function called lclogaggregation that doesn't log those events at all.
Let me know if this helps.
royal_wi_2024
1 Rookie
1 Rookie
•
3 Posts
0
February 5th, 2025 22:14
@DELL-Chris H What are the risks/implications of making it query less often? Also, where do I make the change?
Same question for the iDRAC - and will that stop logging all idrac logon events?
Thanks!
DELL-Young E
Moderator
Moderator
•
4.6K Posts
0
February 6th, 2025 07:50
Hello, I do not see the problem with iDRAC having it in the logs.
you can use filter to find what you are after.
OME is a real time management tool, so it has to query iDRAC periodically.
DELL-Chris H
Moderator
Moderator
•
9.2K Posts
0
February 6th, 2025 19:32
So lclogaggregation will keep those events but doesn’t display them in the LC Log, making that easier to read and find issues.
Making OME log in less often is only maybe an issue in environments without SNMP. Without SNMP, OME does not get real time eventing, so it would be reliant on the health check.
To configure in OME:
It’s in Application Settings > Console Preferences > Device Health
as seen below.
Hessuu
1 Rookie
1 Rookie
•
2 Posts
0
February 7th, 2025 11:33
I had the same issue, and idrac stopped responding; I could not log into the server until I hard-rebooted the idrac physically.
Random devices are getting unknown and getting online in OME; when they are unknown, idrac stops working. Here is the screenshot.
After rebooting the idrac physically, I can see a lot of multiple attempts from the OME username.
Dell-Martin S
Moderator
Moderator
•
3.4K Posts
0
February 7th, 2025 15:39
Hi,
i couldn't see anything that you wrote on this picture
Hessuu
1 Rookie
1 Rookie
•
2 Posts
0
February 8th, 2025 20:18
This is exactly what I can see in the browser loading and loading...
DELL-Young E
Moderator
Moderator
•
4.6K Posts
0
February 10th, 2025 02:38
The USR messages are normal and don’t cause issues. They are just from the hourly health check. But if the iDRAC is having an issue separate from this, then OME can’t log into it and will turn health grey. I think you rather have an idrac issue to investigate. You can also contact region support through https://dell.to/4jTn80c for another opinion.
Respectfully,