Message ID: 43017
Message Description: LOG_ID_EVENT_AUTH_NTLM_AUTH_FAIL
Message Meaning: NTLM authentication failed
Type: Event
Category: user
Severity: Notice
|
Log Field Name |
Description |
Data Type |
Length |
|---|---|---|---|
|
date |
Date |
string |
10 |
|
time |
Time |
string |
8 |
|
logid |
Log ID |
string |
10 |
|
type |
Log Type |
string |
16 |
|
subtype |
Log Subtype |
string |
20 |
|
level |
Log Level |
string |
11 |
|
devid |
Device ID |
string |
16 |
|
vd |
Virtual Domain Name |
string |
32 |
|
eventtime |
Event time |
uint64 |
20 |
|
tz |
Time zone |
string |
5 |
|
logdesc |
Log Description |
string |
4096 |
|
user |
User name of authenticated user |
string |
256 |
|
authproto |
The protocol that initiated the authentication |
string |
512 |
|
action |
Policy Action |
string |
65 |
|
status |
Status |
string |
23 |
|
msg |
Log Message |
string |
4096 |
|
srcip |
Source IP |
ip |
39 |
|
reason |
Reason |
string |
256 |
|
dstip |
Destination IP |
ip |
39 |
|
policyid |
Policy ID |
uint32 |
10 |
|
group |
User group Name |
string |
64 |
|
adgroup |
AD Group Name of FSSO user |
string |
128 |