Centrify sshd audit events

Centrify sshd audit events
Centrify Event Id Description Parameters

27000

DZ SSH right granted

service: service

client: client

27001

DZ SSH right denied

service: service

client: client

reason: error message

27100-Deprecated

SSHD granted

This event has been deprecated. Use Centrify Event Id 27104 introduced in release 2017.3 instead.

service: service

tty: tty

authMechanism: authentication type

client: client

sshRights: ssh rights

command: command

27101-Deprecated

SSHD denied

This event has been deprecated. Use Centrify Event Id 27105 introduced in release 2017.3 instead.

service: service

tty: tty

authMechanism: authentication type

client: client

reason: error message

27102

SSHD connection close successfully

service: service

tty: tty

authMechanism: authentication type

client: client

reason: error message

27104

SSHD granted

added in release 2017.3

service: service

tty: tty

authMechanism: authentication type

client: client

sshRights: ssh rights

command: command

MfaRequired: whether user was required to do MFA

EntityName: Entity Name

27105

SSHD denied

added in release 2017.3

service: service

tty: tty

authMechanism: authentication type

client: client

reason: error message

MfaRequired: whether user was required to do MFA

EntityName: Entity Name

27200

SCP succeeded

added in release 18.8

dataFlowType: send a file/directory to remote machine or receive a file/directory from remote machine

fileType: file or directory

pathname: the full path name of file or directory

27201

SCP failed

added in release 18.8

dataFlowType: send a file/directory to remote machine or receive a file/directory from remote machine

fileType: file or directory

pathname: the full path name of file or directory

reason: Error message

27300

SFTP command execution succeeded

added in release 18.8

operation: SFTP command

arguments: the arguments of SFTP command

27301

SFTP command execution failed

added in release 18.8

operation: SFTP command

arguments: the arguments of SFTP command

reason: Error message