So, every time something happens on the server, that action gets stored as an entry in the audit log. But the log is configured to only hold 20MB of data. Once the log file hits 20M, every time a new log entry gets added, it will delete the oldest entry from the log to make sure it stays under that 20MB limit. Someone executed enough empty password login attempts (37k+) in one day to push every single log entry from election day and more out of the log. Because they don't want to turn over the router logs, they do not know who did this.
So, every time something happens on the server, that action gets stored as an entry in the audit log. But the log is configured to only hold 20MB of data. Once the log file hits 20M, every time a new log entry gets added, it will delete the oldest entry from the log to make sure it stays under that 20MB limit. Someone executed enough empty password login attempts (37k+) in one day to push every single log entry from election day and more out of the log. Because they don't want to turn over the router logs, they do not know who did this.
It's a pity that all electronic transactions aren't gathered up and stored by a govt agency controlled by the military.
Oh wait .... ;-P
It's a pity they refuse to use it.
What OS? Sorry I was in meetings literally all day and haven’t had a chance to start catching up until now
Windows Server
Thank you. I was listening, but this part eluded me.