Siemens RUGGEDCOM ROX II, User Manual

Page: 62 / 798

Chapter 1
Introduction
RUGGEDCOM ROX II
CLI User Guide
16 Logged Security Events
Category Event Message Facility Severity
Event
Type
Log
audit user:
{Username}/0 no such
local user
LOG_DAEMON Info Alarm Auth.log SE_NETWORK_UNSUCCESSFUL_LOGON (Invalid
Username)
login failed,
reason='{Reason}', user
ipaddr='0.0.0.0'
LOG_AUTHPRIV Notice Alarm Auth.log
audit user:
{Username}/0 Provided
Invalid Password
LOG_DAEMON Info Alarm Auth.log SE_NETWORK_UNSUCCESSFUL_LOGON (Invalid
Password)
login failed,
reason='Invalid
Password', user
ipaddr='0.0.0.0'
LOG_AUTHPRIV Notice Alarm Auth.log
(cli) audit user:
{Username}/{User
ID} Logged out ssh
<local> user
LOG_DAEMON Info Event Auth.log SE_LOGOFF (CLI)
username:{Username}
usid:{User ID} stopped
cli session from ip:{IP
Address}
LOG_AUTH Notice Event Auth.log
(web) audit user:
{Username}/{User ID}
logged out from Web UI
LOG_DAEMON Info Event Auth.log SE_LOGOFF(Web UI)
username:{Username}
usid:{User ID} stopped
webui session from ip:
{IP Address}
LOG_AUTH Notice Event Auth.log
SE_ACCESS_PWD_ENABLED Enabling Brute Force
Attack Protection
LOG_USER Error Event Syslog
SE_ACCESS_PWD_DISABLED Brute Force Attack
protection not enabled
LOG_USER Error Alarm Syslog
SE_ACCESS_PWD_CHANGED audit user: {User Group}/
{User ID} WebUI action '/
rmf_admin:admin/users/
userid{"{Target User}"}/
set-password'
LOG_DAEMON Info Event Auth.log
audit user:
{Username}/0 logged in
through Web UI from {IP
Address}
LOG_DAEMON Info Event Auth.log
audit user: {Username}/
{User ID} assigned to
groups: {User Group}
LOG_DAEMON Info Event Auth.log
SE_ACCESS_GRANTED
username:{Username}
usid:{User ID} started
{Context} session from
ip:{IP Address} source-
port:{Port} through
{Protocol} protocol
LOG_AUTH Notice Event Auth.log