Pattern FTP Session

Pattern FTP Session

Base Rule

General Information

Information

Thank You For Using The FTP Service

Sub Rule

General FTP Information

Information

FTPD Exiting

Sub Rule

Process/Service Stopping

Startup and Shutdown

FTP Download

Sub Rule

File Download

Information

FTP Login

Sub Rule

User Logon

Authentication Success

Authentication Failed - Login Incorrect

Sub Rule

User Logon Failure : Bad Username

Authentication Failure

FTP Upload

Sub Rule

File Upload Beginning

Information

File Deleted

Sub Rule

Object Deleted/Removed

Access Success

Fcntl Lock Of PID File Failed

Sub Rule

Command Execution Failure

Access Failure

FTP Session Closed

Sub Rule

Service Logoff

Authentication Success

Pam Authentication Failed

Sub Rule

Authentication Failure Activity

Authentication Failure

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text\String

N/A

<Sip>

IP Address

N/A

<sname>

Text\String

N/A

<dname>

Text\String

N/A

<protname>

Text\String

N/A

<login>

Text\String

N/A

<process>

Text\String

N/A

<processid>

Number

N/A

<object>

Text\String

N/A

<bytesout>

Number

N/A

<rate>

Number

N/A

<tag1>

Text\String

N/A

<tag2>

Text\String