Passwordless Authentication Message

Classification

Rule Name

Rule Type

Classification

Common Event

Passwordless Authentication Message

Base Rule

Audit : Other Audit

General Authentication Event

Passwordless Authentication Succeeded

Sub Rule

Authentication Success

User Logon

Passwordless Authentication Failed

Sub Rule

Authentication Failure

Authentication Failure Activity

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text/String

N/A

<process>

Text/String

N/A

<processid>

Number

N/A

<command>

Text/String

N/A

<tag1>

Text/String

N/A

<group>

Text/String

N/A

<login>

Text/String

N/A

<account>

Text/String

N/A

<object>

Text/String

N/A

<domain>

Text/String