Syslog - Generic Linux OS: User Account Deleted

Vendor Documentation

N/A

Rule Name	Rule Type	Classification	Common Event
User Account Deleted	Base Rule	Account Deleted	User Account Deleted
Shadow Group Deleted	Sub Rule	Account Deleted	Group Deleted
Group Deleted	Sub Rule	Account Deleted	Group Deleted

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<severity>	Text/String	N/A
N/A	<tag1>	Text/String	N/A
N/A	<dname>	Text/String	N/A
N/A	<dip>	IP Address	N/A
N/A	<process>	Text/String	N/A
N/A	<processid>	Number	N/A
N/A	<tag2>	Text/String	N/A
N/A	<account>	Text/String	N/A
N/A	<group>	Text/String	N/A