Skip to main content
Skip table of contents

General Failed Authentication Messages

Classification

Rule Name

Rule Type

Classification

Common Event

General Failed Authentication MessagesBase RuleUser Logon FailureAuthentication Failure
Did Not Receive Identification StringSub RuleAuthentication Failure ActivityAuthentication Failure
Received DisconnectSub RuleSession EndedOther Audit Success
Failed Login AttemptSub RuleUser Logon FailureAuthentication Failure
Login Timed OutSub RuleSession TimeoutWarning
Authentication Failure For RootSub RuleAuthentication Failure ActivityAuthentication Failure
Authentication Failure For RootSub RuleAuthentication Failure ActivityAuthentication Failure
Authentication FailureSub RuleAuthentication Failure ActivityAuthentication Failure

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A<dname>Text/String
N/A<process>Text/String
N/A<processid>Number
N/A<dinterface>Number
N/A<tag1>Text/String
N/A<login>Text/String
N/A<sip>Number
N/A<sname>Text/String
N/A<sport>Number
N/A<seconds>Number
N/A<account>Text/String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.