Lookup Failed
Classification
Rule Name | Rule Type | Classification | Common Event |
|---|---|---|---|
| Lookup Failed | Base Rule | Audit : Access Failure | Access Object Failure |
| Program Lookup Failed | Sub Rule | Access Failure | Access Object Failure |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type |
|---|---|---|
| SYSD | <severity> | Text/String |
| Oct 5 08:33:27 | <sname> | Text/String |
| N/A | <process> | Text/String |
| lookup | <tag1> | Text/String |
| lookup for | <object> | Text/String |