C.1 Authentication Events

C.1.1 Authentication

Table C-1 Authentication Events - Authentication

Tag	Value
Severity	1
Event Name	Authentication
Resource	UserAuthentication
SubResource	Authenticate
Message	User <username> has passed authentication to Sentinel/Wizard

Table C-2 Authentication Events - Failed Authentication

Tag	Value
Severity	4
Event Name	AuthenticationFailed
Resource	UserAuthentication
SubResource	Authenticate
Message	Authentication of user <username> with OS name <domUser> from <IP> failed

Table C-3 Authentication Events - Web UI Login

Table C-4 Authentication Events - Web UI Login Failed

Table C-5 Authentication Events - User Logged In

Tag	Value
Severity	1
Event Name	UserLoggedIn
Resource	UserSessionManager
SubResource	User
Message	User <username> with OS name <osName> at <IP> logged in; currently <number> active users

Table C-6 Authentication Events - User Logged Out

Tag	Value
Severity	1
Event Name	UserLoggedOut
Resource	UserSessionManager
SubResource	User
Message	Closing session for <username> OS name <osName> from <IP> was on since <date>; currently <number> active users