General Failed Authentication Messages | LogRhythm Documentation

Classification

Rule Name	Rule Type	Classification	Common Event
General Failed Authentication Messages	Base Rule	User Logon Failure	Authentication Failure
Did Not Receive Identification String	Sub Rule	Authentication Failure Activity	Authentication Failure
Received Disconnect	Sub Rule	Session Ended	Other Audit Success
Failed Login Attempt	Sub Rule	User Logon Failure	Authentication Failure
Login Timed Out	Sub Rule	Session Timeout	Warning
Authentication Failure For Root	Sub Rule	Authentication Failure Activity	Authentication Failure
Authentication Failure For Root	Sub Rule	Authentication Failure Activity	Authentication Failure
Authentication Failure	Sub Rule	Authentication Failure Activity	Authentication Failure