F.1 Authentication Events

F.1.1 Authentication

Table F-1 Authentication Events - Authentication

Tag

Value

Severity

1

Event Name

Authentication

Resource

UserAuthentication

SubResource

Authenticate

Message

User <username> has passed authentication to Sentinel/Wizard

F.1.2 Failed Authentication

Table F-2 Authentication Events - Failed Authentication

Tag

Value

Severity

4

Event Name

AuthenticationFailed

Resource

UserAuthentication

SubResource

Authenticate

Message

Authentication of user <username> with OS name <domUser> from <IP> failed

F.1.3 Web User Interface Login

Table F-3 Authentication Events - Web UI Login

Tag

Value

Severity

1

Event Name

LoginUser

Resource

SessionServices

SubResource

SessionServices

Message

Logging in user:<username>

F.1.4 Web User Interface Login Failed

Table F-4 Authentication Events - Web UI Login Failed

Tag

Value

Severity

4

Event Name

LoginUser-*-Failed

Resource

SessionServices

SubResource

SessionServices

Message

Logging in user:<username>

F.1.5 User Logged In

Table F-5 Authentication Events - User Logged In

Tag

Value

Severity

1

Event Name

UserLoggedIn

Resource

UserSessionManager

SubResource

User

Message

User <username> with OS name <osName> at <IP> logged in; currently <number> active users

F.1.6 User Logged Out

Table F-6 Authentication Events - User Logged Out

Tag

Value

Severity

1

Event Name

UserLoggedOut

Resource

UserSessionManager

SubResource

User

Message

Closing session for <username> OS name <osName> from <IP> was on since <date>; currently <number> active users