Security Log Error Action

Common Event Grammar › Operational Security Category › Security Log Activity Class › Security Log Error Action

Security Log Error Action

The Security Log Error action expresses information on security log-related error conditions. You can map any type of security log error to this action. You can map less severe events to the Security Log Warning action. You can map more severe events that warrant immediate action to the Security Log Alert action.

Information	Level
Source - User Information	Tertiary
Source - Host Information	Tertiary
Source - Object Information	Tertiary
Source - Process Information	Tertiary
Source - Group Information	Tertiary
Dest - User Information	Tertiary
Dest - Host Information	Primary
Dest - Object Information	Secondary
Dest - Group Information	Tertiary
Agent - Information	Primary
Agent - Host Information	Primary
Event Source - Host Information	Primary
Event Source - Information	Tertiary
Event - Information	Primary
Result - Information	Primary

Result	event_result	event_severity
Failure	F	5