Accepted Publickey

Classification

Rule Name

Rule Type

Common Event

Classification

Accepted Publickey

Base Rule

Authentication Activity

Authentication Success

Superuser Accepted PublicKey

Sub Rule

Authentication Activity

Authentication Success

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text\String

N/A

<login>

Text\String

N/A

<dname>

Text\String

N/A

<process>

Text\String

N/A

<processid>

Number

N/A

<sip>

Number

N/A

<sport>

Number

N/A

<protname>

Text\String

N/A

<hash>

Text\String