I have had some inconveniences due to a large number of events generated by various energy meters since when performing an event count at the end of the month, they present between 30,000 to 50,000 events per "Cause: Ethernet" and "Effect value: Auth Ok and Auth Fail ".
Initially it was thought that they were generated every time someone tried to register, however due to the large number of monthly events it is impossible that this is due to a failed authentication by a user.
I need to know the origin of these events so that I can attack the root cause and that they do not generate as much disk space.
Hello @danielbarrantes ,
By chance, are these devices time sync'd via PME? If so this could explain some of these events. When PME sends a time sync to a meter with advanced security there are actually 2 time sync messages, one without user security information and a second with security information. Some meters will ignore the first message, others will register that message as a failed authentication.
Not much that can be changed inside PME at this time. The T1 device to me looks like information in some software (likely PME) is using the wrong password for User1.
Hello @Grant_IPACS ,
Would need to know more details, device types, firmware versions, advanced/standard/no security/legacy security enabled or disabled, number of devices etc. Time sync is just one possible reason, more investigations would be needed to determine if this is the root cause on your system.
Discuss challenges in energy and automation with 30,000+ experts and peers.
Find answers in 10,000+ support articles to help solve your product and business challenges.
Find peer based solutions to your questions. Provide answers for fellow community members!