I hope I am putting this in the right section.
We are trying to identify failed login attempts to vcenter.
We have a VCSA with external PSC. AD authentication for vcenter.
Currently running 6.0U2
Log insight running as well.
If I use the thick client, I can see in the vcenter logs "Cannot login user@domain.com@ipaddr"
when using the web client, if the username is valid, there is no entry that I can find anywhere. If the username is not valid, I see in the PSC logs: "Failed to find user, group, or domain by name..."
Where are the failed authentications being logged through the web client???
Thanks for your help!