Skip to main content
Skip table of contents

User Authentication And Session Message

Vendor Documentation


Classification

Rule Name

Rule Type

Classification

Common Event

User Authentication And Session MessageBase RuleInformationGeneral Event Log Information
Admin: User Account ModifiedSub RuleAccount ModifiedUser Account Attribute Modified
Admin: Server Shutdown ActivitySub RuleStartup and ShutdownSystem Shutdown
Admin: Session Timed OutSub RuleInformationUser Session Timeout
Admin: Forcing Off UserSub RuleAuthentication SuccessUser Logoff
Admin: Password Realm Restrictions FailedSub RuleAuthentication FailureUser Logon Failure
Admin: User Logged OutSub RuleAuthentication SuccessUser Logoff
Admin: Password Change Failed ActivitySub RuleOther Audit FailureFailed Password Change Attempt
Access: Login Succeeded ActivitySub RuleAuthentication SuccessUser Logon
Access: Session TerminatedSub RuleInformationSession Ended
Access: Login Failed ActivitySub RuleAuthentication FailureUser Logon Failure

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

N/A<severity>String
N/A<sip>IP Address
N/A<login>String
N/A<group>String
N/A<vmid>String
N/A<tag1>String
N/A<tag2>String
N/A<session>String
N/A<useragent>String
N/A<reason>String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.