Recently I observed there are many undesired information event log in logging console.
The message ""User admin logged in from remote address 118.200.XX.XX" are being logged about 1 min interval repeated as long as the user session is active. Attached is the data event log for your reference.
May I know is it normal behaviour? I assume that it should be sort of audit event whereby only trigger when user session log in and out. If the event log is expected, then I could conclude it may be unauthorise access.
Any help is appreciated. Thanks