User Management ASIM parser for Linux Authpriv logs
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimUserManagementLinuxAuthpriv |
| Built-in Parser | _ASim_UserManagement_LinuxAuthpriv |
| Schema | UserManagement |
| Schema Version | 0.1.1 |
| Parser Type | 🔌 Source (product-specific) |
| Product | Microsoft |
| Parser Version | 0.1.1 (version history) |
| Last Updated | Mar 06, 2024 |
| Unifying Parser | ASimUserManagement |
| Source File | Parsers\ASimUserManagement\Parsers\ASimUserManagementLinuxAuthpriv.yaml |
Description
This ASIM parser supports normalizing Linux authpriv logs delivered using Syslog to the ASIM UserManagement normalized schema.
Source Tables
This parser reads from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
Syslog |
Facility == "authpriv"ProcessName in "gpasswd,groupadd,groupdel,groupmod,useradd,userdel,usermod" |
✓ | ✓ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
| Connector | Solution |
|---|---|
| SyslogAma | Syslog |
Solutions: Syslog
References
- ASIM User Management Schema
- ASIM
- Ubuntu remote logging
- gpasswd
- groupadd
- groupdel
- groupmod
- useradd
- userdel
- usermod
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊