Failed To Change Host Password

Classification

Rule Name

Rule Type

Classification

Common Event

Failed To Change Host Password

Base Rule

Audit : Access Failure

Access Object Failure

Failed To Change Host Password : Client Not Found

Sub Rule

Access Failure

Access Object Failure

Failed To Change Host Password : Preauth Failed

Sub Rule

Access Failure

Access Object Failure

Mapping with LogRhythm Schema  

Device Key in log message

LogRhythm Schema

Data Type

SYSD

<severity>

Text/String

Oct  5 08:15:33

<sname>

Text/String

N/A

<process>

Text/String

Client

<account>

Text/String

N/A

<domainorigin>

Text/String

service

<login>

Text/String

N/A

<command>

Text/String

N/A

<object

Text/String

sever

<dname>

Text/String

caused by

<vmid>

Text/String

reason

<reason>

Text/String