Clock Errors

Classification

RuleName	Rule Type	Common Event	Classification
PAM Security Session Failure	Sub Rule	Authentication Failure Activity	Authentication Failure
User Account Expired	Sub Rule	User Logon Failure : Account Disabled	Authentication Failure
Clock Errors	Base Rule	Modify Object Failure	Access Failure
Cannot Set Security Context	Sub Rule	Modify Object Failure	Access Failure

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<sip>	Number
N/A	<process>	Text\String
N/A	<tag2>	Text\String
N/A	<tag1>	Text\String

×