Syslog Changes in 9.1.R15? AUT24326

[cgoodw1]

Hello,

I am currently montioring on event log message AUT24326. It appears to have disappeared after the 9.1.15R update. I was wondering if this event log has been deprecated?  If so, what is the new or alternate event message that can be used?

Example event log:

May 13 23:50:26 device hostname removed PulseSecure:: id=firewall time="2022-05-13 23:50:26" pri=6 fw=IP removed vpn=PSA-PR user=xxxx123 realm="HHHH" roles="" proto=auth src=x.x.x.x dst= dstname= type=vpn op= arg="" result= sent= rcvd= agent="" duration= msg="AUT24326: Primary authentication successful for xxxx123/HHHH from x.x.x.x"

Is there an updated list for syslog messages in 9.1.R15?

[NetworkBod · Accepted solution]

@cgoodw1 Hi.. I recently updated to 9.1R15, just checked our logs and can confirm that AUT24326 are still present. Do you have any filters applied on the log? Thanks.

[cgoodw1]

Thanks for the confirmation, no filters are applied. I opened a support ticket, because it sounds like the upgrades did not go as planned and support was originially involved. Thanks again for the confirmation.