The Authorization Error action expresses information about error conditions raised during an authorization activity. Authorization activity includes setting up permission on objects, systems, applications for subjects like user or system accounts, hosts and so forth. Any type of error about the Authorization can be mapped to this action. Less severe events should be mapped to the Authorization Warning action. More severe events that warrant immediate action should be mapped to the Authorization Alert action.
|
Information |
Level |
|---|---|
|
Source - User Information |
Secondary |
|
Source - Host Information |
Secondary |
|
Source - Object Information |
Tertiary |
|
Source - Process Information |
Tertiary |
|
Source - Group Information |
Tertiary |
|
Dest - User Information |
Primary |
|
Dest - Host Information |
Primary |
|
Dest - Object Information |
Tertiary |
|
Dest - Group Information |
Tertiary |
|
Agent - Information |
Primary |
|
Agent - Host Information |
Primary |
|
Event Source - Host Information |
Primary |
|
Event Source - Information |
Tertiary |
|
Event - Information |
Primary |
|
Result - Information |
Primary |
|
Result |
event_result |
event_severity |
|---|---|---|
|
Success |
n/a |
n/a |
|
Failure |
F |
5 |
|
Copyright © 2014 CA.
All rights reserved.
|
|