Skip to main content
Skip table of contents

SSH Login Audit

Classification

Rule Name

Rule Type

Common Event

Classification

SSH Login AuditBase RuleSSH User Authentication Status InformationInformation
SSH : AuthnameSub RuleSSH User Authentication Status InformationInformation
SSH : VersionSub RuleSSH User Authentication Status InformationInformation
SSH : Key ExchangeSub RuleSSH User Authentication Status InformationInformation
SSH : Connection StatisticsSub RuleSSHD Information MessageInformation

Mapping with LogRhythm Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<severity>Text\String
N/A<dip>IP Address
N/A<dport>Number
N/A<login>Text\String
N/A<process>Text\String
N/A<processid>Number
N/A<object>Text\String
N/A<objectname>Text\String
N/A<version>Number
N/A<bytesin>Number
N/A<bytesout>Number
N/A<duration>Number
N/A<tag1>Number
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.