Table G-1 Authentication Events - Authentication
Tag |
Value |
---|---|
Severity |
1 |
Event Name |
Authentication |
Resource |
UserAuthentication |
SubResource |
Authenticate |
Message |
User <username> has passed authentication to Sentinel/Wizard |
Table G-2 Authentication Events - Failed Authentication
Tag |
Value |
---|---|
Severity |
4 |
Event Name |
AuthenticationFailed |
Resource |
UserAuthentication |
SubResource |
Authenticate |
Message |
Authentication of user <username> with OS name <domUser> from <IP> failed |
Table G-3 Authentication Events - Web UI Login
Tag |
Value |
---|---|
Severity |
1 |
Event Name |
LoginUser |
Resource |
SessionServices |
SubResource |
SessionServices |
Message |
Logging in user:<username> |
Table G-4 Authentication Events - Web UI Login Failed
Tag |
Value |
---|---|
Severity |
4 |
Event Name |
LoginUser-*-Failed |
Resource |
SessionServices |
SubResource |
SessionServices |
Message |
Logging in user:<username> |
Table G-5 Authentication Events - User Logged In
Tag |
Value |
---|---|
Severity |
1 |
Event Name |
UserLoggedIn |
Resource |
UserSessionManager |
SubResource |
User |
Message |
User <username> with OS name <osName> at <IP> logged in; currently <number> active users |
Table G-6 Authentication Events - User Logged Out
Tag |
Value |
---|---|
Severity |
1 |
Event Name |
UserLoggedOut |
Resource |
UserSessionManager |
SubResource |
User |
Message |
Closing session for <username> OS name <osName> from <IP> was on since <date>; currently <number> active users |