RDP Events

Axis Security can send user activity logs related to RDP application access, to multiple log streaming services, such as Splunk and Syslog. Click here to view general events sent to Splunk. These logs include the fields listed in the table below.

Activity Log Field

Description

AccessBlocked

Session blocked due to the organization’s security policy

BadDevicePosture

Access to this application was blocked according to the organization's security policy

ClientIPBlocked

Access to this application was blocked according to the organization's security policy

ConnectionFailed

Connection failed- not able to reach the RDP server

ConnectorAllocationFailure

Axis encountered an error processing your request

IdpMismatch

This RDP file is registered to another user. Download a new file in the User Portal

MatchedRule

Access to this application has been blocked according to the organization's security policy

ProfileAccessMismatch

Access to this application was blocked according to the organization's security policy

RDPLauncherFileAuthentication

RDP file was launched

RDPLauncherFileAuthenticationFailed

The RDP file failed to launch

RDPLauncherFileDownloaded

RDP launcher file was downloaded from the User Portal

RDPMachineAuthentication

Connected to RDP server as . The username is the one used for logging in to Axis

RDPMachineAuthenticationFailed

Login failed- wrong RDP credentials

SuccessfulIdPLogin

Authentication with the Identity Provider was successful

Timeout

Session length has reached its limit as determined by the administrator. Connection will close in 5 minutes

TokenRevoked

The RDP token session was revoked

Unknown/InvalidRequest

An error had occurred

Unreachable

The remote desktop is unreachable

UserMismatch

This RDP file is registered to another user. Download a new file in the User Portal

Wrong user Credentials

Wrong credentials

Wrong Predefined Credentials

Wrong server credentials


Did this page help you?