1Password

Download 37
Last updated Feb 19, 2024

1password-signin-attempts

Get sign-in attempts from 1Password

1password-signin-attempts [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
profile=PROFILE
1Password connect profile code
duration=NUM{mon|w|d|h|m|s}
Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier.
from=yyyyMMddHHmmss
Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
to=yyyyMMddHHmmss
End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.

Output Fields

FieldTypeNameDescription
profileStringConnect profileProfile name of 1Password
_timeDateTime
src_ipIP addressSource IPClient IP address
target_user_uuidStringUser UUID
target_user_nameStringUser name
target_user_emailStringUser email
src_countryStringSource countrye.g. KR
categoryStringCategorye.g. success, credentials_failed, mfa_failed, sso_failed, modern_version_failed, firewall_failed, firewall_reported_success
typeStringTypee.g. credentials_ok, mfa_ok, password_secret_bad, mfa_missing
detailsStringDetails
app_nameDateClient app namee.g. 1Password for Windows
app_verStringClient app versione.g. 81006027
platform_nameStringClient platform nameHostname
platform_verStringClient platform versione.g. Unknown
os_nameStringClient OS namee.g. Windows
os_verStringClient OS versione.g. 10.0.2009
src_regionStringSource regione.g. Seoul
src_cityStringSource citye.g. Mapo-gu
src_latitudeDoubleSource latitudee.g. 37.5433
src_longitudeDoubleSource longitudee.g. 126.9073
log_uuidStringLog UUID
session_uuidStringSession UUID