Skip to main content
Skip table of contents

Session State Changed

Classification

Rule Name

Rule Type

Common Event

Classification

Session ClosedSub RuleSession EndedOther Audit Success
Session ClosedSub RuleSession EndedOther Audit Success
Session State ChangedBase RuleSession State ChangedOther Audit
New SessionSub RuleStart New Session SuccessOther Audit Success
Session RemovedSub RuleSession ClosedOther Audit Success
Session OpenedSub RuleBegin SessionOther Audit Success
Session OpenedSub RuleBegin SessionOther Audit Success

Mapping with LogRhythm Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<dname>Text\String
N/A<login>Text\String
N/A<process>Text\String
N/A<processid>Number
N/A<tag1>Text\String

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.