Authentication Events - Failed Authentication
Table B-11
Tag
Severity
Event Name
Resource
SubResource
Message
B.3.5 Locked Account
When a locked user account is attempting to login, the following event is generated.
Authentication Events - Locked Account
Table B-12
Tag
Severity
Event Name
Resource
SubResource
Message
B.3.6 No Such User Event
When a user attempts to login into the application and authentication succeeds but the user is not an
Sentinel user, the following event is generated.
Authentication Events - No Such User Event
Table B-13
Tag
Severity
Event Name
Resource
SubResource
Message
Value
4
AuthenticationFailed
UserAuthentication
Authenticate
Authentication of user <name> with OS name <domUser> from <IP>
failed
Value
4
LockedUser
UserAuthentication
Authentication
Attempt to login using locked account <acct>
Value
4
NoSuchUser
UserAuthentication
Authenticate
No existing user with name <name> found
System Events for Sentinel 471