Skip to main content
Skip table of contents

SSHD Connection

Classification

Rule Name

Rule Type

Classification

Common Event

SSHD ConnectionBase RuleNetwork TrafficConnection Established
SSHD Connection Opened From HostSub RuleNetwork TrafficInbound Connection Established
Closing SSHD Connection To HostSub RuleNetwork TrafficInbound Connection Closed
Connection Closed By UserSub RuleOther Audit SuccessClient Connection Closed

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

SAU2<severity>Text/String
Oct 23 15:31:20<dname>Text/String
N/A<process>Text/String
N/A<processid>Number
N/A<tag1>Text/String
N/A<sip>Number
N/A<sport>Number
N/A<login>Text/String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.