Syslog - Generic Linux OS: Login Daemon Messages

Vendor Documentation

N/A

Rule Name	Rule Type	Common Event	Classification
Login Daemon Messages	Base Rule	General Information	Information
Logind Emergency Message	Sub Rule	General Emergency Log Message	Critical
Logind Alert Message	Sub Rule	General Alert	Critical
Logind Critical Message	Sub Rule	General Critical	Critical
Logind Error Message	Sub Rule	General Error	Error
Logind Warning Message	Sub Rule	General Warning	Warning
Logind Notice Message	Sub Rule	General Notice	Information
Logind Information Message	Sub Rule	General Information	Information
Logind Debug Message	Sub Rule	General Debug Message	Information
Logind New Session Message	Sub Rule	Start New Session Success	Other Audit Success
Logind Removed Session Message	Sub Rule	Session Closed	Information
Logind Session Logged Out Message	Sub Rule	Logoff	Other Audit Success

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<severity>	Text/String	N/A
N/A	<tag1>	Text/String	N/A
N/A	<dip>	IP Address	N/A
N/A	<dname>	Text/String	N/A
N/A	<process>	Text/String	N/A
N/A	<processid>	Number	N/A
N/A	<subject>	Text/String	N/A
N/A	<session>	Number	N/A
N/A	<account>	Text/String	N/A