A user logged in to a database
| Parameter | Value |
|---|
| Subject | database |
| Activity | login |
| Activity Type | database-login |
| Pretty Name | Database Login |
| Success | Fail |
|---|
database-login
| database-failed-login
|
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
| Field | Core | Detection | Informational |
|---|
| src_ip | | ✓ | |
| login_type | | ✓ | |
| src_zone | | | |
| domain | | ✓ | |
| dest_ip | | ✓ | |
| dest_host | | ✓ | |
| domain_user_name | | | |
| src_host | | ✓ | |
| user | | ✓ | |
| dest_zone | | | |
| Field | Core | Detection | Informational |
|---|
| src_ip | | ✓ | |
| failure_code | | ✓ | |
| login_type | | ✓ | |
| src_zone | | | |
| domain | | ✓ | |
| dest_ip | | ✓ | |
| dest_host | | ✓ | |
| domain_user_name | | | |
| failure_reason | | ✓ | |
| src_host | | ✓ | |
| user | | ✓ | |
| dest_zone | | | |