Wallix Admin Bastion
Description
Constructor: Wallix
Product: Bastion
Log sample
| WAB(root)[22022]: can't initialize acl data backend A0002903 172.28.8.66: Failed to authenticate the current user on proposed authentication procedures.
|
| WAB(root)[22531]: Sending credentials
|
Fields normalization
| Normalized fields |
Parsed fields |
| [init][usr][name] |
[user] |
| [init][usr][name] |
[init_user] |
| [init][usr][domain] |
[domain] |
| [init][host][name] |
[hostname] |
| [init][host][ip] |
[src_ip] |
| [target][usr][domain] |
[target_domain] |
| [target][host][ip] |
[target_ip] |
| [target][host][ip] |
[kv][client_ip] |
| [target][host][name] |
[target_hostname] |
| [target][usr][name] |
[target_user] |
| [target][usr][name] |
[wab_user] |
| [target][usr][name] |
[kv][username] |
| [app][proto][name] |
[kv][dst_protocol] |
| [app][proto][name] |
[app_proto] |
| [init][process][id] |
[pid] |
| [init][process][name] |
[program] |
| [init][process][status] |
[facility] |
| [alarm][name] |
[alarm] |
| [alarm][name] |
[kv][type] |
| [action] |
[action] |
| [wab][wab_service] |
[wab_service] |
| [wab][secondary] |
[kv][secondary] |
| [wab][src_protocol] |
[kv][src_protocol] |
| [wab][dst_protocol] |
[kv][dst_protocol] |