Skip to main content
Skip table of contents

Su Session Opened/Closed

Classification

Rule Name

Rule Type

Common Event

Classification

Su Session Opened/ClosedBase RuleAuthentication ActivityAuthentication Success
Switch User OpenedSub RuleSession InitializationInformation
Switch User ClosedSub RuleSession ClosedOther Audit Success

Mapping with LogRhythm Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<severity>Text\String
N/A<dname>Text\String
N/A<login>Text\String
N/A<account>Text\String
N/A<process>Text\String
N/A<parentprocessname>Text\String
N/A<parentprocessid>Number
N/A<object>Number
N/A<subject>Text\String
N/A<tag1>Text\String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.