Failed Authentication Activity

Vendor Documentation

Rule Name	Rule Type	Common Event	Classification
Failed Authentication Activity	Base Rule	Authentication Failure Activity	Authentication Failure
Error Resolving Username	Sub Rule	Authentication Failure Activity	Authentication Failure
Authentication Failure	Sub Rule	Authentication Failure Activity	Authentication Failure
Error Getting Information About Username	Sub Rule	Authentication Failure Activity	Authentication Failure
Password Failed For Invalid User	Sub Rule	User Logon Failure : Bad Password	Authentication Failure
Invalid User	Sub Rule	User Logon Failure : Bad Username	Authentication Failure
Unknown Username	Sub Rule	User Logon Failure : Bad Username	Authentication Failure

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<sip>	Number/Text/String	Ip Address
N/A	<dip>	Number/Text/String	Ip Address
N/A	<sport>	Number	N/A
N/A	<login>	Text/String	N/A
N/A	<process>	Text/String	process information
N/A	<tag1>	Text/String	N/A