Skip to content

Login

authz

ClientAuthenticationFailed

${clientName} unable to authenticate with invalid secret.
Severity Status Audit Event
Warning Failure Yes

ClientIdInvalid

Unable to authenticate with invalid service account ID, ${clientId}.
Severity Status Audit Event
Warning Failure Yes

LoginBlockedIP

Login by ${actorUserEmail} from ${ip} blocked because the request came from outside of the IP whitelist.
Severity Status Audit Event
Warning Failure Yes

LoginFailedDueToAccountLock

Login failed for ${userName} because the user is locked.
Severity Status Audit Event
Warning Failure Yes

LoginFailedInsufficientPermissions

Login by ${userName} (${domain}) from ${ipAddress} failed because the  user does not have any assigned roles.
Severity Status Audit Event
Warning Failure Yes

LoginFailedSSOUnauthorizedForGroups

Login by ${userEmail}(SSO) failed.  User does not belong to any of the SSO groups authorized in RSC.  User's SSO groups: (${groups})
Severity Status Audit Event
Warning Failure Yes

LoginSucceeded

${userName} logged in.
Severity Status Audit Event
Info Success Yes

LoginSucceededWithNotification

${userName} logged in.
Severity Status Audit Event
Info Success Yes

LogoutSucceeded

${userName} was logged out ${reason}.
Severity Status Audit Event
Info Success Yes

PasskeyLoginFailed

${username} failed to login with passkey.
Severity Status Audit Event
Warning Failure Yes

PasswordLoginFailedKnownUser

Known user, ${username}, was unable to login with an invalid password.
Severity Status Audit Event
Warning Failure Yes

PasswordLoginFailedUnknownUser

Login failed. User ${username} does not exist.
Severity Status Audit Event
Warning Failure Yes

ResetPasswordMailSent

Password reset email sent for ${userName}.
Severity Status Audit Event
Info Success Yes

TotpLoginFailed

${username} failed to login with Rubrik Two-Step Verification.
Severity Status Audit Event
Warning Failure Yes

UpdateUserPasswordFailed

${userName} was unable to update their password. Reason: ${reason}.
Severity Status Audit Event
Warning Failure Yes

UpdateUserPasswordSucceeded

${userName} succeeded to update their password.
Severity Status Audit Event
Info Success Yes

rkcli

RkcliLogin

Admin user logged in to rkcli on the ${node} node from ${ip}.
Severity Status Audit Event
Info Success Yes