RHSMD/SSSD Authentication Events

Classification

Rule Name	Rule Type	Common Event	Classification
RHSMD/SSSD Authentication Events	Base Rule	Authentication Activity	Authentication Success
Password Has Expired	Sub Rule	Authentication Failure Activity	Authentication Failure
Preauthentication Failure	Sub Rule	Authentication Failure Activity	Authentication Failure
Client Credentials Revoked	Sub Rule	Access Revoked Activity	Access Revoked
No Credential Cache Found	Sub Rule	Failed To Acquire Credentials	Error

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<sname>	Number/Text/String
N/A	<process>	Text/String
N/A	<processid>	Number
N/A	<subject>	Text/String

×