Successfull login

[abodage]

Hi Team,

My client want to monitor login to their webpage. If any unsuccessful attempt happened it should triggered alert.

Please give suggestion.

Thanks.

[rkennedy]

This sounds like more of a solution for Nagios Log Server as you'll be able to feed in log files, query for specific strings, and then create alerts based off of it. https://www.nagios.com/products/nagios-log-server/

How are unsuccessful attempts logged in the environment?

[abodage]

Can we acheive this using webinject test cases using web transaction Plugin??

[rkennedy]

I don't think Webinject is the right answer for this either. It's used to test login methods, not check for invalid attempts. You would use this to ensure your login form is working properly. From the site -

WebInject is a free tool for automated testing of web applications and web services. It can be used to test individual system components that have HTTP interfaces (JSP, ASP, CGI, PHP, AJAX, Servlets, HTML Forms, XML/SOAP Web Services, REST, etc), and can be used as a test harness to create a suite of [HTTP level] automated functional, acceptance, and regression tests. A test harness allows you to run many test cases and collect/report your results. WebInject offers real-time results display and may also be used for monitoring system response times.

[eloyd]

Webinject is great for pretending to be a user and checking web transactions to see how long they take. It does not tell you if someone tried to log in and failed. For that, you need to monitor the security log file from the server side, not the application from the user's side.

@rkennedy is correct - the tool for this is Nagios Log Server. It is free for small installations and is the _perfect_ tool for the job.

[rkennedy]

Thanks @eloyd!

@abodage - hopefully this answers your question. Let us know if you have anything further to ask.