Clock Errors

Classification

RuleName

Rule Type

Common Event

Classification

PAM Security Session Failure

Sub Rule

Authentication Failure Activity

Authentication Failure

User Account Expired

Sub Rule

User Logon Failure : Account Disabled

Authentication Failure

Clock Errors

Base Rule

Modify Object Failure

Access Failure

Cannot Set Security Context

Sub Rule

Modify Object Failure

Access Failure

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<sip>

Number

N/A

<process>

Text\String

N/A

<tag2>

Text\String

N/A

<tag1>

Text\String