Skip to main content
Question

User Login

  • September 9, 2026
  • 3 replies
  • 24 views

Forum|alt.badge.img+15

Hi All,

 

we see every day an user login try from an old and deleted account. The login try is reported ans an information in the eventlog. 

 

Are tehere any options to get more informations about this login try ? 

3 replies

Forum|alt.badge.img+17
  • Vaulter
  • September 10, 2026

Hi ​@SSchmidt ,

Please confirm whether the affected user ID is present in the UMUsers table within the CommServ database. We suspect that a stale entry may be contributing to the reported behavior.

Kindly review the Audit Report to identify the source of the user login attempts, including whether they originated from the Java Console, Command Center, or another access point.

To gather additional information and investigate the issue thoroughly, we recommend opening a support case.


Forum|alt.badge.img+15
  • Author
  • Certified Expert
  • September 10, 2026

Hi,

 

thanks for the quick response.

 

in the audit report:

 

ID

Severity Level

User

Time

Operation

Details

486,092

Medium

N/A

09/09/2026 15:20:44

Command-line Login Failed

User [xyz] login failed.

486,091

Medium

cvadmin

09/09/2026 15:20:44

Login Failed

Login Name: xyz

Machine: xx

Login failed due to incorrect password

 

Every day the same entry.

 

In the dbo.UMUsers i check the content and the user is not listed there. 

 

Interesting is that i the in the Tabels more users than in the javagui or commandcenter. 

 

Did you have any idear how i can findout from where the qlogin is comming ? 


Forum|alt.badge.img+17
  • Vaulter
  • September 10, 2026

Hi ​@SSchmidt ,

 

For qlogin issues, the main log file to check is:

  • qcommand.log this shows qlogin and qlogout activity and related error messages.

If the issue is authentication failure or client registration related, also check:

  • qsdk.log
  • cvinstallmgr.log
  • evmgrs.log

We can also verify the security Audit events from Machine where these events are generated from.