Adaptive Authentication 403 error logs

John Anderson
Mega Guru

Hi,

 

We've recently moved from IP Address Access Control to Adaptive Authentication. It's been a pretty easy migration but I'm struggling to find the logs that would show me IP addresses which are getting a 403 error based on the Global Blocking Policy. The use case to is to troubleshoot connections by finding the IP address which is getting the 403 error.

 

I've tried using Node Log File Browser but can't find the info that I'm looking for. Can anyone help me out here please? Thanks. 

1 ACCEPTED SOLUTION

Randheer Singh
ServiceNow Employee
ServiceNow Employee

You can check the source IP address field in the adaptive_auth_event table.  

 

RandheerSingh_0-1689755724564.png

 

 

 

View solution in original post

3 REPLIES 3

Randheer Singh
ServiceNow Employee
ServiceNow Employee

You can check the source IP address field in the adaptive_auth_event table.  

 

RandheerSingh_0-1689755724564.png

 

 

 

Many thanks Randheer! That's exactly what I was looking for. 

John Anderson
Mega Guru

Also note that I had to enable 'glide.authenticate.policy.debug' as it was disabled in my instance.