RDP Events
Axis Security can send user activity logs related to RDP application access, to multiple log streaming services, such as Splunk and Syslog. Click here to view general events sent to Splunk. These logs include the fields listed in the table below.
Activity Log Field | Description |
---|---|
AccessBlocked | Session blocked due to the organization’s security policy |
BadDevicePosture | Access to this application was blocked according to the organization's security policy |
ClientIPBlocked | Access to this application was blocked according to the organization's security policy |
ConnectionFailed | Connection failed- not able to reach the RDP server |
ConnectorAllocationFailure | Axis encountered an error processing your request |
IdpMismatch | This RDP file is registered to another user. Download a new file in the User Portal |
MatchedRule | Access to this application has been blocked according to the organization's security policy |
ProfileAccessMismatch | Access to this application was blocked according to the organization's security policy |
RDPLauncherFileAuthentication | RDP file was launched |
RDPLauncherFileAuthenticationFailed | The RDP file failed to launch |
RDPLauncherFileDownloaded | RDP launcher file was downloaded from the User Portal |
RDPMachineAuthentication | Connected to RDP server as . The username is the one used for logging in to Axis |
RDPMachineAuthenticationFailed | Login failed- wrong RDP credentials |
SuccessfulIdPLogin | Authentication with the Identity Provider was successful |
Timeout | Session length has reached its limit as determined by the administrator. Connection will close in 5 minutes |
TokenRevoked | The RDP token session was revoked |
Unknown/InvalidRequest | An error had occurred |
Unreachable | The remote desktop is unreachable |
UserMismatch | This RDP file is registered to another user. Download a new file in the User Portal |
Wrong user Credentials | Wrong credentials |
Wrong Predefined Credentials | Wrong server credentials |
Updated almost 3 years ago