RDP Events
Admins can view RDP Events from Insights > Users > User Activity screen.
Click here to view general events sent to Splunk. Logs include the fields listed in the table below.
| Activity Log Field | Description |
|---|---|
| AccessBlocked | Session blocked due to the organization’s security policy |
| BadDevicePosture | Access to this application was blocked according to the organization's security policy |
| ClientIPBlocked | Access to this application was blocked according to the organization's security policy |
| ConnectionFailed | Connection failed- not able to reach the RDP server |
| ConnectorAllocationFailure | Axis encountered an error processing your request |
| IdpMismatch | This RDP file is registered to another user. Download a new file in the User Portal |
| MatchedRule | Access to this application has been blocked according to the organization's security policy |
| ProfileAccessMismatch | Access to this application was blocked according to the organization's security policy |
| RDPLauncherFileAuthentication | RDP file was launched |
| RDPLauncherFileAuthenticationFailed | The RDP file failed to launch |
| RDPLauncherFileDownloaded | RDP launcher file was downloaded from the User Portal |
| RDPMachineAuthentication | Connected to RDP server as . The username is the one used for logging in to Axis |
| RDPMachineAuthenticationFailed | Login failed- wrong RDP credentials |
| SuccessfulIdPLogin | Authentication with the Identity Provider was successful |
| Timeout | Session length has reached its limit as determined by the administrator. Connection will close in 5 minutes |
| TokenRevoked | The RDP token session was revoked |
| Unknown/InvalidRequest | An error had occurred |
| Unreachable | The remote desktop is unreachable |
| UserMismatch | This RDP file is registered to another user. Download a new file in the User Portal |
| Wrong user Credentials | Wrong credentials |
| Wrong Predefined Credentials | Wrong server credentials |
Updated 9 months ago