Re: [cas-user] Audit Logging Questions

2015-01-15 Thread Dmitriy Kopylenko 
Correction: AUTHENTICATION_SUCESS - AUTHENTICATION_SUCCESS

 On Jan 15, 2015, at 11:06 AM, Dmitriy Kopylenko dkopyle...@unicon.net wrote:
 
 AUTHENTICATION_SUCESS


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] Audit Logging Questions

2015-01-15 Thread Dmitriy Kopylenko 
SERVICE_TICKET_CREATED

SERVICE_TICKET_NOT_CREATED

PROXY_GRANTING_TICKET_CREATED

PROXY_GRANTING_NOT_TICKET_CREATED

SERVICE_TICKET_VALIDATED

SERVICE_TICKET_VALIDATE_FAILED

TICKET_GRANTING_TICKET_CREATED

TICKET_GRANTING_TICKET_NOT_CREATED

TICKET_GRANTING_TICKET_DESTROYED

AUTHENTICATION_SUCESS

AUTHENTICATION_FAILED

Cheers,
D.


 On Jan 15, 2015, at 10:41 AM, Adam Causey apcau...@vcu.edu wrote:
 
 I have a couple of questions regarding the Inspektr audit logging in CAS:
 
 1) Where can I get a list of all possible ACTIONs that could be logged 
 (AUTHENTICATION_SUCCESS, TICKET_GRANTING_TICKET_CREATED, etc.)?
 
 2) Does anyone have a regular expression that they currently use to parse the 
 audit logs that they could share?  We use QRadar.
 
 Thanks,
 
 Adam Causey
 Virginia Commonwealth Universiy
 -- 
 You are currently subscribed to cas-user@lists.jasig.org as: 
 dkopyle...@unicon.net
 To unsubscribe, change settings or access archives, see 
 http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

[cas-user] Audit Logging Questions

2015-01-15 Thread Adam Causey 
I have a couple of questions regarding the Inspektr audit logging in CAS:

1) Where can I get a list of all possible ACTIONs that could be logged (
AUTHENTICATION_SUCCESS, TICKET_GRANTING_TICKET_CREATED, etc.)?

2) Does anyone have a regular expression that they currently use to parse
the audit logs that they could share?  We use QRadar.

Thanks,

Adam Causey
Virginia Commonwealth Universiy

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user