The following table lists the Cyber Recovery alerts with a Warning severity.
Alert ID | Message Summary | Summary Details | Remedy |
---|---|---|---|
3002 | Security Officer account logged in. | The Cyber Recovery Security Officer account logged in to the system. | Use the Security Office account only when necessary; use an admin account for typical administration activities. |
3005 | Failed to delete credentials. | Unable to delete credentials. | Contact Customer Support. |
3008 | Partially analyzed point-in-time copy. | The application performed a partial analysis on the requested point-in-time copy. | Investigate possible irregular activity. |
3009 | Cyber Recovery Security Officer account password has changed. | The Cyber Recovery Security Officer account password has been modified. | Verify that the password change was intended. If not, contact the crso to investigate. If the crso password has changed and it was not intended, follow the crsetup.sh --changepassword procedure to reset the password based on the password policy |
3010 | Failed to delete copies associated with a sandbox. | Unable to delete copies that a sandbox is using. | Delete the sandbox and then delete the copies. |
3014 | The user email address has changed. | The user email address associated with this account has been modified. | Verify the email address change. |
3024 | Cyber Recovery user removed from the system. | The Cyber Recovery user has been removed from the system. | If this is not your intention, create a new Cyber Recovery user for the system. |
3026 | Multifactor authentication disabled. | Multifactor authentication (MFA) is currently disabled for an account. |
|
3027 | Six failed login attempts. | User has six consecutive failed login attempts. |
|