Asterisk security logs

FreePBX Security
,
1

Hello,
recently I installed FreePBX 15 into a new machine after upgrading all modules I am having all these security logs all the time in the asterisk CLI :

Connected to Asterisk 16.11.1 currently running on freepbx (pid = 2438) [2020-11-20 09:48:18] SECURITY[2581]: res_security_log.c:114 security_event_stasis_cb: SecurityEvent="SuccessfulAuth",EventTV="2020-11-20T09:48:18.146+0000",Severity="Informational",Service="AMI",EventVersion="1",AccountID="admin",SessionID="0x7f5790000c30",LocalAddress="IPV4/TCP/0.0.0.0/5038",RemoteAddress="IPV4/TCP/127.0.0.1/60420",UsingPassword="0",SessionTV="2020-11-20T09:48:18.146+0000" [2020-11-20 09:48:18] SECURITY[2581]: res_security_log.c:114 security_event_stasis_cb: SecurityEvent="SuccessfulAuth",EventTV="2020-11-20T09:48:18.146+0000",Severity="Informational",Service="AMI",EventVersion="1",AccountID="admin",SessionID="0x7f5790000c30",LocalAddress="IPV4/TCP/0.0.0.0/5038",RemoteAddress="IPV4/TCP/127.0.0.1/60420",UsingPassword="0",SessionTV="2020-11-20T09:48:18.146+0000" [2020-11-20 09:48:22] SECURITY[2581]: res_security_log.c:114 security_event_stasis_cb: SecurityEvent="SuccessfulAuth",EventTV="2020-11-20T09:48:22.503+0000",Severity="Informational",Service="AMI",EventVersion="1",AccountID="admin",SessionID="0x7f578c0009a0",LocalAddress="IPV4/TCP/0.0.0.0/5038",RemoteAddress="IPV4/TCP/127.0.0.1/60428",UsingPassword="0",SessionTV="2020-11-20T09:48:22.503+0000" [2020-11-20 09:48:22] SECURITY[2581]: res_security_log.c:114 security_event_stasis_cb: SecurityEvent="SuccessfulAuth",EventTV="2020-11-20T09:48:22.503+0000",Severity="Informational",Service="AMI",EventVersion="1",AccountID="admin",SessionID="0x7f578c0009a0",LocalAddress="IPV4/TCP/0.0.0.0/5038",RemoteAddress="IPV4/TCP/127.0.0.1/60428",UsingPassword="0",SessionTV="2020-11-20T09:48:22.503+0000"

I need some help to figure out how to stop these logs. Hope somebody can help me.
Thanks

2

Seems like these logs are generated from AMI which stands for Asterisk Manager Interface, after some researches I found that they are intended for an informational scope. To get rid of them I just turned off security for console in the Settings > Log File Settings.

1 Like
3

Turning this off will do anything harm to security of FreePBX?
I mean. Is it used by any other application like fail2ban?

Cheers

4

No - turning off the notifications for successful logins shouldn’t be a problem.

5

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.