database-login.md

database-login

Description

A user logged in to a database

Parameters

Parameter	Value
Subject	database
Activity	login
Activity Type	database-login
Pretty Name	Database Login

Legacy Names

Success	Fail
database-login	database-failed-login

Fields

The possible fields for this activity type will vary depending on whether the activity was a success or a fail.

database-login:success

Field	Core	Detection	Informational
src_ip		✓
login_type		✓
src_zone
domain		✓
dest_ip		✓
dest_host		✓
domain_user_name
src_host		✓
user		✓
dest_zone

database-login:fail

Field	Core	Detection	Informational
src_ip		✓
failure_code		✓
login_type		✓
src_zone
domain		✓
dest_ip		✓
dest_host		✓
domain_user_name
failure_reason		✓
src_host		✓
user		✓
dest_zone