diff --git a/server_admin/topics/events/login.adoc b/server_admin/topics/events/login.adoc index fcdf6d6762..813e3caabf 100644 --- a/server_admin/topics/events/login.adoc +++ b/server_admin/topics/events/login.adoc @@ -79,8 +79,46 @@ This logging is very useful if you want to use a tool like Fail2Ban to detect if is trying to guess user passwords. You can parse the log file for `LOGIN_ERROR` and pull out the IP Address. Then feed this information into Fail2Ban so that it can help prevent attacks. +The Logging Event Listener logs events to the `org.keycloak.events` logger category. By default debug log events are not +included in server logs. + +To include debug log events in server logs, edit the `standalone.xml` file and change the log level used by the Logging +Event listener. Alternately, you can configure the log level for `org.keycloak.events`. + +For example, to change the log level add the following: + +[source,xml] +---- + + ... + + + + +---- + +To change the log level used by the Logging Event listener, add the following: + +[source,xml] +---- + + ... + + + + + + + + + +---- + +Valid values for the log levels are `debug`, `info`, `warn`, `error`, and `fatal`. + The Email Event Listener sends an email to the user's account when an event occurs. -The Email Event Listener only supports the following events at the moment: + +Currently, the Email Event Listener supports the following events: * Login Error * Update Password