Skip to main content
Skip table of contents

Syslog - Generic Linux OS: Sudo Messages

Vendor Documentation

N/A

Classification

Rule Name

Rule Type

Common Event

Classification

Sudo MessagesBase RuleGeneral InformationInformation
Sudo Session StartedSub RuleAuthentication ActivityAuthentication Success
Sudo Command ExecutedSub RuleGeneral Sudo CommandActivity

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A<severity>Text/StringN/A
N/A<dip>IP AddressN/A
N/A<dname>Text/StringN/A
N/A<process>Text/StringN/A
N/A<processid>NumberN/A
N/A<subject>Text/StringN/A
N/A<tag1>Text/StringN/A
N/A<account>Text/StringN/A
N/A<login>Text/StringN/A
N/A<command>Text/StringN/A
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.