SNC Access Control: denied access to system@snc.admin,maint - why constantly attempting to login???

[Mark C_]

Hello all,

We have setup an alert 'multiple failed user log on' with azure sentinel and because we enabled the plugin SNC access control - that restricts access of support teams to instance, we are flooded with logs

Do you know if these tasks can be stopped somewhere? or should we just allow this alerts coming in ?

System logs

sysevent

[Tony Chatfield1]

Hi, this question would be best answered by ServiceNow Support and I would log a case with them.
If any of these requests can be disabled, you would need to log with them anyway.