```not using splunk, but yes, thats an exact match...
# citrix-netscalerc
Charles Moore
10/03/2026, 2:22 PM Copy code
not using splunk, but yes, thats an exact match:
AAA LOGIN_FAILED ... User pitboss PPE unexpectedly died NSPPE;<command>;# X (the main one, 61,295 lines on 01-cvg since 2 October per the checker)
AAA Message ... "Authentication is rejected for pitboss PPE unexpectedly died NSPPE;<command>..."
AAATM Message ... "AAAD RESP: received resp, user: <pitboss PPE unexpectedly died NSPPE;<command>;# X>, factor: <aaavsrv_...>"