Section F.1.1, Authentication
Section F.1.2, Failed Authentication
Section F.1.3, Web User Interface Login
Section F.1.4, Web User Interface Login Failed
Section F.1.5, User Logged In
Section F.1.6, User Logged Out
Table F-1 Authentication Events - Authentication
Tag
Value
Severity
1
Event Name
Authentication
Resource
UserAuthentication
SubResource
Authenticate
Message
User <username> has passed authentication to Sentinel/Wizard
Table F-2 Authentication Events - Failed Authentication
4
AuthenticationFailed
Authentication of user <username> with OS name <domUser> from <IP> failed
Table F-3 Authentication Events - Web UI Login
LoginUser
SessionServices
Logging in user:<username>
Table F-4 Authentication Events - Web UI Login Failed
LoginUser-*-Failed
Table F-5 Authentication Events - User Logged In
UserLoggedIn
UserSessionManager
User
User <username> with OS name <osName> at <IP> logged in; currently <number> active users
Table F-6 Authentication Events - User Logged Out
UserLoggedOut
Closing session for <username> OS name <osName> from <IP> was on since <date>; currently <number> active users