About notifications when MID Server user authentication fails

[__ __2]

I think there is a function that notifies you of the error content when user authentication on the MID Server fails, but I can't find it no matter how hard I search.
Could you please tell me the name of the event or notification that corresponds to that?

[MackI]

1. MID Server Issue Table (ecc_agent_issue):

Go to this table.
Purpose: This table stores records for various MID Server issues, including authentication failures.
Event Name: The specific event name for authentication failures is authentication.failure.
Notification: You can create an event-driven notification or a business rule on the ecc_agent_issue table to trigger alerts (e.g., emails, notifications in the system) when this event occurs.

2. MID Server Logs:

Location: On the MID Server machine, you'll find logs in the agent\logs directory.
Error Messages: Look for messages like "failed to authenticate" or "authentication error" in the agent0.log and wrapper.log files.

If you like this opinion. Please kindly mark this your best answer OR Helpful and help me to contribute more to this community

[__ __2]

Does this mean that there is no mechanism for notifying MID authentication errors OOTB?

[MackI · Accepted solution]

hi @__ __2 

Email Notifications (OOTB)

* Functionality: ServiceNow has built-in email notifications for MID Server issues, including authentication failures. However, these may not be enabled by default.
* Configuration: You can activate and customize these notifications in the system properties related to MID Server. Navigate to System Properties > MID Server. In the Email Notifications section, you can define the recipients and customize the email content.
* Benefits: Easy to set up and provides basic alerts about authentication problems.

Which One to Choose:

* If you need basic email alerts for MID Server authentication failures, start with enabling and configuring the out-of-the-box email notifications in the system properties.
* If you want more control over notifications and actions, create custom event-driven notifications or business rules on the ecc_agent_issue table.
* If you need detailed debugging information and advanced monitoring, leverage the MID Server logs.

If you like this opinion and your problem is resolved after reviewing and applying it. Please kindly mark this your best answer🌠 OR  mark it  Helpful ⛑if you think that you get some insight from this content relevant to your problem and help me to contribute more to this community

[MackI]

hi @__ __2 

A small request from my end, If you like this opinion and your problem is resolved after reviewing and applying it. Please kindly mark this your best answer‌🌠‌ OR  mark it  Helpful ‌⛑‌ if you think that you get some insight from this content relevant to your problem and help me to contribute more to this community