Skip to main content
Skip table of contents

File Transfer Protocol Message

Classification

Rule Name

Rule Type

common event

Classification

File Transfer Protocol MessageBase RuleGeneral InformationInformation
Fcntl Lock Of PID File FailedSub RuleCommand Execution FailureAccess Failure
Pam Authentication FailedSub RuleAuthentication Failure ActivityAuthentication Failure
Authentication Failed - Login IncorrectSub RuleUser Logon Failure : Bad UsernameAuthentication Failure
File DeletedSub RuleObject Deleted/RemovedAccess Success
FTPD ExitingSub RuleProcess/Service StoppingStartup and Shutdown
FTP Session ClosedSub RuleService LogoffAuthentication Success
FTP LoginSub RuleUser LogonAuthentication Success
Login RefusedSub RuleAuthentication Failure ActivityAuthentication Failure


Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A<dname>String/Text
N/A<process>String/Text
N/A<processid>Number
N/A<tag1>String/Text
N/A<protname>String/Text
N/A<sname>String/Text

<sip>numeric

<login>string/text

<object>string/text

<tag2>string/text
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.