Table G-1 Authentication Events - Authentication
|
Tag |
Value |
|---|---|
|
Severity |
1 |
|
Event Name |
Authentication |
|
Resource |
UserAuthentication |
|
SubResource |
Authenticate |
|
Message |
User <username> has passed authentication to Sentinel/Wizard |
Table G-2 Authentication Events - Failed Authentication
|
Tag |
Value |
|---|---|
|
Severity |
4 |
|
Event Name |
AuthenticationFailed |
|
Resource |
UserAuthentication |
|
SubResource |
Authenticate |
|
Message |
Authentication of user <username> with OS name <domUser> from <IP> failed |
Table G-3 Authentication Events - Web UI Login
|
Tag |
Value |
|---|---|
|
Severity |
1 |
|
Event Name |
LoginUser |
|
Resource |
SessionServices |
|
SubResource |
SessionServices |
|
Message |
Logging in user:<username> |
Table G-4 Authentication Events - Web UI Login Failed
|
Tag |
Value |
|---|---|
|
Severity |
4 |
|
Event Name |
LoginUser-*-Failed |
|
Resource |
SessionServices |
|
SubResource |
SessionServices |
|
Message |
Logging in user:<username> |
Table G-5 Authentication Events - User Logged In
|
Tag |
Value |
|---|---|
|
Severity |
1 |
|
Event Name |
UserLoggedIn |
|
Resource |
UserSessionManager |
|
SubResource |
User |
|
Message |
User <username> with OS name <osName> at <IP> logged in; currently <number> active users |
Table G-6 Authentication Events - User Logged Out
|
Tag |
Value |
|---|---|
|
Severity |
1 |
|
Event Name |
UserLoggedOut |
|
Resource |
UserSessionManager |
|
SubResource |
User |
|
Message |
Closing session for <username> OS name <osName> from <IP> was on since <date>; currently <number> active users |