Centrify sshd audit events
Centrify Event Id | Description | Parameters |
27000 |
DZ SSH right granted |
service: service client: client |
27001 |
DZ SSH right denied |
service: service client: client reason: error message |
27100-Deprecated |
SSHD granted This event has been deprecated. Use Centrify Event Id 27104 introduced in release 2017.3 instead. |
service: service tty: tty authMechanism: authentication type client: client sshRights: ssh rights command: command |
27101-Deprecated |
SSHD denied This event has been deprecated. Use Centrify Event Id 27105 introduced in release 2017.3 instead. |
service: service tty: tty authMechanism: authentication type client: client reason: error message |
27102 |
SSHD connection close successfully |
service: service tty: tty authMechanism: authentication type client: client reason: error message |
27104 |
SSHD granted added in release 2017.3 |
service: service tty: tty authMechanism: authentication type client: client sshRights: ssh rights command: command MfaRequired: whether user was required to do MFA EntityName: Entity Name |
27105 |
SSHD denied added in release 2017.3 |
service: service tty: tty authMechanism: authentication type client: client reason: error message MfaRequired: whether user was required to do MFA EntityName: Entity Name |
27200 |
SCP succeeded added in release 18.8 |
dataFlowType: send a file/directory to remote machine or receive a file/directory from remote machine fileType: file or directory pathname: the full path name of file or directory |
27201 |
SCP failed added in release 18.8 |
dataFlowType: send a file/directory to remote machine or receive a file/directory from remote machine fileType: file or directory pathname: the full path name of file or directory reason: Error message |
27300 |
SFTP command execution succeeded added in release 18.8 |
operation: SFTP command arguments: the arguments of SFTP command |
27301 |
SFTP command execution failed added in release 18.8 |
operation: SFTP command arguments: the arguments of SFTP command reason: Error message |