When Is the "ublkdu" Log Produced

Knowledge Articles
, ,
1

Overview

A user was blocked by brute force protection. It unblocked itself by changing its password.

It was expected for this action to produce a “ublkdu” log, but this specific log could not be found.

This article explains why this log was not seen and presents the actions that can produce it.

Applies To

  • Brute Force Protection
  • Blocked user
  • “ublkdu” log

Solution

The “ublkdu” log is produced when either of the below events happens when an admin or a user clicks on the unblock link:

  • An administrator removes the block.
  • The affected user selects the unblock link in the email notification (if configured).

For the below scenarios, the log is not produced:

  • An administrator raises the Brute Force Threshold described below:
    • Thirty (30) days pass from the last failed login attempt.
    • The affected user changes their password (on all linked accounts).