Skip to main content
Skip table of contents

SU Command Completed

Classification


Rule Name

Rule type

common event

classification

SU Command CompletedBase RuleAuthentication ActivityAuthentication Success
SU CommandSub RuleAuthentication ActivityAuthentication Success
Failed SU To RootSub RuleUser Logon FailureAuthentication Failure
SU To RootSub RuleUser LogonAuthentication Success
Failed SU CommandSub RuleUser Logon FailureAuthentication Failure

Mapping with LogRhythm Schema 

Device Key in Log MessageLogRhythm SchemaData Type
N/A<sip>Number
N/A<dname>String
N/A<account>String
N/A<tag1>String
N/A<login>String
N/A<object>String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.