Failed authentication not reported in the logs about emqx HOT 3 OPEN

I am seeing the same issue with 5.3.1.

from emqx.

Hello!

Not logging auth attempts is a feature of v5 rather than a bug.

Also, for troubleshooting clients, one may also use the tracing feature: https://www.emqx.io/docs/en/latest/observability/tracer.html.
In traces, there is much information about the authentication process.

from emqx.

Hello! Thanks for the answer.

I am a bit confused as to why this is considered a feature?? Logging failed login attempts is a very much standard behavior with any product making use of authentication.

I was planning to write a parser and scenario to use with the Crowdsec IDS/IPS to detect and block IPs trying to brute force logins. But this is not possible if the only way to get the failed login log is via a manually triggered trace.

I was indeed able to figure out the client issue (which was not auth related in the end) via the traces.

from emqx.