Skip to main content
Skip table of contents

Pattern FTP Session

Classification

Rule Name

Rule Type

Common Event

Classification

Pattern FTP SessionBase RuleGeneral InformationInformation
Thank You For Using The FTP ServiceSub RuleGeneral FTP InformationInformation
FTPD ExitingSub RuleProcess/Service StoppingStartup and Shutdown
FTP DownloadSub RuleFile DownloadInformation
FTP LoginSub RuleUser LogonAuthentication Success
Authentication Failed - Login IncorrectSub RuleUser Logon Failure : Bad UsernameAuthentication Failure
FTP UploadSub RuleFile Upload BeginningInformation
File DeletedSub RuleObject Deleted/RemovedAccess Success
Fcntl Lock Of PID File FailedSub RuleCommand Execution FailureAccess Failure
FTP Session ClosedSub RuleService LogoffAuthentication Success
Pam Authentication FailedSub RuleAuthentication Failure ActivityAuthentication Failure

Mapping with LogRhythm Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<severity>Text\String
N/A<Sip>IP Address
N/A<sname>Text\String
N/A<dname>Text\String
N/A<protname>Text\String
N/A<login>Text\String
N/A<process>Text\String
N/A<processid>Number
N/A<object>Text\String
N/A<bytesout>Number
N/A<rate>Number
N/A<tag1>Text\String
N/A<tag2>Text\String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.