Syslog - Generic Linux OS: User Account Created

Vendor Documentation

N/A

Rule Name	Rule Type	Classification	Common Event
User Account Created	Base Rule	Account Created	User Account Created
Group Created	Sub Rule	Account Created	Group Created

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<severity>	Text/String	N/A
N/A	<tag1>	Text/String	N/A
N/A	<dname>	Text/String	N/A
N/A	<dip>	IP Address	N/A
N/A	<process>	Text/String	N/A
N/A	<processid>	Number	N/A
N/A	<tag2>	Text/String	N/A
N/A	<account>	Text/String	N/A
N/A	<group>	Text/String	N/A