Login

authz

---

ClientAuthenticationFailed

${clientName} unable to authenticate with invalid secret.

Severity	Status	Audit Event
Warning	Failure	Yes

ClientIdInvalid

Unable to authenticate with invalid service account ID, ${clientId}.

Severity	Status	Audit Event
Warning	Failure	Yes

LoginBlockedIP

Login by ${actorUserEmail} from ${ip} blocked because the request came from outside of the IP whitelist.

Severity	Status	Audit Event
Warning	Failure	Yes

LoginFailedDueToAccountLock

Login failed for ${userName} because the user is locked.

Severity	Status	Audit Event
Warning	Failure	Yes

LoginFailedInsufficientPermissions

Login by ${userName} (${domain}) from ${ipAddress} failed because the  user does not have any assigned roles.

Severity	Status	Audit Event
Warning	Failure	Yes

LoginFailedSSOUnauthorizedForGroups

Login by ${userEmail}(SSO) failed.  User does not belong to any of the SSO groups authorized in RSC.  User's SSO groups: (${groups})

Severity	Status	Audit Event
Warning	Failure	Yes

LoginSucceeded

${userName} logged in.

Severity	Status	Audit Event
Info	Success	Yes

LoginSucceededWithNotification

${userName} logged in.

Severity	Status	Audit Event
Info	Success	Yes

LogoutSucceeded

${userName} was logged out ${reason}.

Severity	Status	Audit Event
Info	Success	Yes

PasskeyLoginFailed

${username} failed to login with passkey.

Severity	Status	Audit Event
Warning	Failure	Yes

PasswordLoginFailedKnownUser

Known user, ${username}, was unable to login with an invalid password.

Severity	Status	Audit Event
Warning	Failure	Yes

PasswordLoginFailedUnknownUser

Login failed. User ${username} does not exist.

Severity	Status	Audit Event
Warning	Failure	Yes

ResetPasswordMailSent

Password reset email sent for ${userName}.

Severity	Status	Audit Event
Info	Success	Yes

TotpLoginFailed

${username} failed to login with Rubrik Two-Step Verification.

Severity	Status	Audit Event
Warning	Failure	Yes

UpdateUserPasswordFailed

${userName} was unable to update their password. Reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	Yes

UpdateUserPasswordSucceeded

${userName} succeeded to update their password.

Severity	Status	Audit Event
Info	Success	Yes

rkcli

---

RkcliLogin

Admin user logged in to rkcli on the ${node} node from ${ip}.

Severity	Status	Audit Event
Info	Success	Yes