IBM Support

Multiple Event Viewer Application Log entries 'Login failed for user 'sa'. [CLIENT IP] on SQL Server

Troubleshooting


Problem

I.T. administrator opens up Event Viewer on the SQL Server, and opens the 'Application log'. There are multiple entries referring to login failures.

Symptom

Event Log title - SQL 2005:

Failure Audit <date> <time> MSSQLSERVER (4) 18456 N/A <SERVERNAME>

Event Log details - SQL 2005:

Event Type: Failure Audit
Event Source: MSSQL$SQL2005
Event Category: (4)
Event ID: 18456
Date: 27/11/2007
Time: 09:28:32
User: N/A
Computer: SERVERNAME
Description:
Login failed for user 'sa'. [CLIENT: 142.88.130.93]

[{"Product":{"code":"SS9S6B","label":"IBM Cognos Controller"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Controller","Platform":[{"code":"PF033","label":"Windows"}],"Version":"8.3","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}},{"Product":{"code":"SSMRTZ","label":"IBM Cognos Controller on Cloud"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Historical Number

1037381

Document Information

More support for:
IBM Cognos Controller

Software version:
8.3

Operating system(s):
Windows

Document number:
375165

Modified date:
08 May 2025

UID

swg21347518

Manage My Notification Subscriptions