AUTHENTICATION


The Authentication data model provided below aligns with the most commonly used devices and their log formats. Read more about how to use the DNIF Data Model

$SubSystem $Action Description
AUTHENTICATION CONFIG_CHNGD Configuration changes for a user account
AUTHENTICATION USR_AC_LKOUT User accounts locked out due to prolonged inactivity
AUTHENTICATION LOGIN Login operations detected
AUTHENTICATION LOGN_FAIL_SYS_CREDS Failed login activity pertaining to connected devices
AUTHENTICATION LOGN_FAIL_BAD_POL  
AUTHENTICATION LOGN_FAIL_BAD_USER  
AUTHENTICATION LOGOUT Logout operation detected
AUTHENTICATION LOGN_FAIL_USR_DISBLD  
AUTHENTICATION LOGN_FAIL  
AUTHENTICATION USR_ACC_DLETD User account deletion
AUTHENTICATION LOGN_FAIL_BAD_PASS  
AUTHENTICATION LOGN_FAIL_AC_DISBLD  
AUTHENTICATION TERM_LOGIN Terminal based login actions detected by firewall
AUTHENTICATION LOGN_TERM_FAIL_BAD_PASS Wrong password detected by firewall for terminal based login
AUTHENTICATION USR_TIME_OUT User sessions which were inactive for long duration
AUTHENTICATION CONNECT_FAIL Connection failures during the user authentication
AUTHENTICATION VIRUS_DETECT Viruses detected by the firewall
AUTHENTICATION NET_LOGIN Network based login actions detected by firewall
AUTHENTICATION NET_LOGOUT Logout activity for network based logins
AUTHENTICATION LOGIN_FAIL_USR_LKOUT User accounts locked, due to multiple login failures
AUTHENTICATION NET_LOGIN_FAIL_AC_EXPIRD Failed login activity for user accounts which have expired
AUTHENTICATION NET_LOGIN_FAIL_BAD_USER Unsuccessful network based login operation due to wrong username
AUTHENTICATION LOGN_NET_FAIL_BAD_USER Unsuccessful network based login operation due to wrong username
AUTHENTICATION NET_LOGIN_FAIL Unsuccessful network based login attempts
AUTHENTICATION LOGN_TERM_FAIL_USR_DISBLD  
AUTHENTICATION LOGN_NET_FAIL_BAD_PASS  
AUTHENTICATION LOGIN_FAIL Failed authentications detected
AUTHENTICATION LOGN_NET_FAIL_USR_DISBLD  
AUTHENTICATION LOGN_TERM_FAIL_WRNG_WKSTN  
AUTHENTICATION LOGN_TERM_FAIL_OUT_OFF_HRS  
AUTHENTICATION LOGN_NET_FAIL_WRNG_WKSTN  
AUTHENTICATION SHARE_ACCS  
AUTHENTICATION LOGN_NET_FAIL_OUT_OFF_HRS  
AUTHENTICATION LOGN_BAT_LOGOUT  
AUTHENTICATION LOGN_FAIL_OUT_OFF_HRS  
AUTHENTICATION TERM_LOGOUT Terminal based logout operation detected
AUTHENTICATION LOGN_FAIL_USR_LKOUT  
AUTHENTICATION WKSTN_TRUST_FAIL  
AUTHENTICATION NET_SYS_LOGIN  
AUTHENTICATION LOGN_FAIL_WRNG_WKSTN  
AUTHENTICATION LOGN_TERM_FAIL_USR_LKOUT  
AUTHENTICATION LOGN_NET_FAIL_USR_LKOUT  
AUTHENTICATION LOGN_TERM_FAIL_BAD_USER  
AUTHENTICATION LOGN_NOTIF