Documentation Syslog - Documentation Devolutions

Les informations suivantes décrivent le type de message et le sous-type des enregistrements envoyés par le serveur Devolutions à un serveur syslog.

Type de message

Inconnu = 0
Info = 1
Avertissement = 2
Erreur = 3
OpenConnection = 4
Ajouter une connexion = 5
EditConnection = 6
DeleteConnection = 7
OpenVPN = 8
CloseVPN = 9
CredentialsSentToPlugin = 10
Commentaire = 11
ExportedConnection = 12
Utilisateur ajouté = 13
UserDeleted = 14
Utilisateur édité = 0xF
SecurityGroupAdded = 0x10
SecurityGroupDeleted = 17
SecurityGroupEdited = 18
RoleAdded = 19
RoleDeleted = 20
Rôle édité = 21
MacroScriptTool = 22
Documents exportés = 23
KeyAgentKeyUsed = 24
ReportOpened = 25
RepositoryAdded = 26
DépôtSupprimé = 27
RepositoryEdited = 28
AttachmentAdded = 29
Pièce jointe supprimée = 30
AttachmentEdited = 0x1F
AttachmentDocumentUpdated = 0x20
AttachmentOpened = 33
ActivityLogCleared = 34
DeletedEntryCleared = 35
EntryHistoryCleared = 36
DataSourcePermissionChanged = 37
ServerPropertiesViewed = 38
PropriétésDuServeurÉditées = 39
Serveur mis à jour = 40
DocumentUpdated = 41
MotDePasseVu = 43
PasswordChanged = 44
ConnectionStringViewed = 45
PasswordHistoryCleared = 46
ConnectionViewed = 47
ShortcutAdded = 48
RaccourciSupprimé = 49
PasswordTemplateAdded = 50
Modèle de mot de passe modifié = 51
PasswordTemplateDeleted = 52
ResetPassword = 53
Réservation = 54
Restitution = 55
PermissionChanged = 56
Validation = 57
PamPasswordViewed = 58
PamCredentialAdded = 59
PamCredentialEdited = 60
PamCredentialDeleted = 61
TypingMacroExecuted = 62
TerminalScriptExecuted = 0x3F
Connexion copié = 0x40
ConnectionHistoryVersionReset = 65
Accès refusé = 66
PamCertificateViewed = 67
PamTagAdded = 68
PamTagRead = 69
PamTagEdited = 70
PamTagDeleted = 71
PamTagSupprimerTagsAssociés = 72
PamTagDeleteUnusedTags = 73
PamResetPasswordScheduleAdded = 74
PamResetPasswordScheduleRead = 75
PamResetPasswordScheduleEdited = 76
PamResetPasswordScheduleDeleted = 77
PamPasswordUpdated = 78
PamFolderAdded = 79
PamFolderRead = 80
PamFolderEdited = 81
PamFolderDeleted = 82
PamCredentialRead = 83
PamCheckoutAdded = 84
PamCheckoutRead = 85
PamCheckoutEdited = 86
PamCheckoutDeleted = 87
PamCheckoutStatusChanged = 88
PamCheckoutAborted = 89
PamCheckoutExpiré = 90
UserResetPassword = 91
PamPasswordHistoryViewed = 92
LicenseAdded = 93
LicenseDeleted = 94
LicenseEdited = 95
PamCheckoutEnded = 96
Demande de réservation approuvée = 97
PamCheckoutDenied = 98
PamCheckoutActive = 99
EnregistrementDeSessionVu = 100
Nom d'utilisateur consulté = 101
DomainViewed = 102
UserLicenseAssigned = 103
Licence utilisateur non assignée = 104
PamCredentialSync = 105
PamPasswordReset = 106
PamPasswordBrokering = 107
RecordingInterrupted = 108
Exporté toutes les connexions = 109
PamFolderExporté = 110
VaultMasterPasswordChanged = 111
Mot de passe à usage unique consulté = 112
PamCheckoutCancelled = 113
PamCheckoutForcedCheckin = 114
UserLocked = 115
Demande d'accès temporaire envoyée = 116
TemporaryAccessRequestApproved = 117
DemandeD'AccèsTemporaireAnnulée = 118
DemandeD'AccèsTemporaireRefusée = 119
Ajouter le modèle = 120
EditTemplate = 121
SupprimerModèle = 122
PamCheckoutPolicyAdded = 123
PolitiqueDePamCheckoutModifiée = 124
PamCheckoutPolicyDeleted = 125
SensitiveDataViewed = 126
PamOtpTemplateAdded = 0x7F
PamOtpTemplateEdited = 0x80
PamOtpTemplateDeleted = 129
PamPasswordPropagation = 130
EntryResurrectionFailed = 131
ExportDocumentation = 132
ParamètresSpécifiquesÀUtilisateurModifiés = 133
RemovedUserSpecificSettings = 134
ConnectionÉtablieParCodeD'Urgence = 135
PamVaultAdded = 136
PamVaultEdited = 137
PamVaultDeleted = 138
PamVaultExported = 139
Utilisateur réinitialisation A2F = 140

MessageSub type

PasswordAnalyzer = 2501
Journaux d'administration = 2502
ConnectedUserList = 2503
EntréeDeConnexionExpirée = 2504
Entrées supprimées = 2505
Dernier journal d'utilisation = 2506
Journal de connexion partagée = 2507
LoginHistory = 2508
Tentative de connexion = 2509
Journaux d'administration = 2510
OpenedConnections = 2511
Mot de passe copié sur le presse-papiers = 4301
Demandé pour édition Web = 4302
Pas de droits = 6600
UserIsNotFoundOrIncorrectPassword = 6601
InvalidAttachmentId = 6602
CantAccessAnotherUsersRoamingSetting = 6603
DatabaseUsersAreNotAllowed = 6604
DomainUsersAreNotAllowed = 6605
UtilisateursPersonnalisésNonAutorisés = 6606
LocalMachineUsersAreNotAllowed = 6607
Interdit d'enregistrer l'utilisateur = 6608
CannotDeleteEntry = 6609
InvalidRepositoryId = 6610
CannotSaveRole = 6611
NotAllowedToChangePassword = 6612
Interdit d'enregistrer le rôle = 6613
IncorrectUserType = 6614
NotAllowedToManageAttachments = 6615
NotAllowedToAddInFolder = 6616
NonAutoriséÀEnregistrerL'Entrée = 6617
NotAllowedToDeleteEntry = 6618
NotAllowedToCheckin = 6619
Pas autorisé à obtenir des informations sur l'authentification à deux facteurs = 6620
Pas autorisé à voir la pièce jointe = 6621
NotTheUsersPrivateVault = 6622
NotAllowedToDeleteEntryHistory = 6623
LicenseDoesNotAllowEntryInteraction = 6624
Doit être administrateur = 6625
Pas autorisé à voir l'entrée = 6626
EntryNotFound = 6627
Pas autorisé à voir l'historique des entrées = 6628
NotAllowedToCheckoutEntry = 6629
NotAllowedToGetCheckoutInformation = 6630
Interdit d'obtenir des réservations pour l'utilisateur = 6631
NotAllowedToManageHandbooks = 6632
Interdit d'obtenir les pages du manuel = 6633
NotAllowedToViewLogs = 6634
Pas autorisé à voir l'historique des mots de passe = 6635
UserSpecificSettingsNotAllowed = 6636
IDConnexionInvalide = 6637
NonAutoriséÀVoirLesEntréesSupprimées = 6638
NotAllowedToViewTemplates = 6639
NotAllowedToCopyToClipboard = 6640
NotAllowedToViewPassword = 6641
Pas autorisé à gérer les utilisateurs = 6642
Pas autorisé à réinitialiser le mot de passe = 6643
Seul le destinataire peut supprimer la pièce jointe = 6644
InvalidAccessToken = 6645
CantReleaseAnotherUsersLock = 6646
UserDoesNotHaveAccessToVault = 6647
OnlyRecipientCanSaveSecureAttachment = 6648
OnlyRecipientCanReadSecureMessage = 6649
A2F non configuré = 6650

Exemples d'enregistrements syslog

Supprimer une entrée RDP

Jul 26 13:51:41 10.3.1.4 Devolutions[Server] PersonalConnection - [5] Entrée supprimée - MessageType: 7, MessageSubType: , UserName: DOMAIN\banderson, MachineName: COMPUTER123, ConnectionName: Server ABC, ConnectionTypeName: RDP (Microsoft Remote Desktop), ConnectionID: da3886a2-e653-4f56-8000-e55e5dc3313a, ConnectionHostName: , ConnectionUserName: , StartDateTime: 7/26/2022 1:51:45 PM, StartDateTimeUTC: , EndDateTime: , EndDateTimeUTC: , GroupName: Training\Operationnels, Comment: , LoggedUserName: banderson@windjammer.co, Prompt: , TickerNumber: , SecurityGroup: , Cost: , UserInfoID: 04b48fd6-3490-4457-874d-d919a0518cf4, SupportClose: False, CloseMode: , OpenMode: , ClientApplication: RDM, ClientVersion: 2022.2.14.0 , IsEmbedded: , RepositoryID: 22a24c36-837b-4baf-8859-9497902a6de0, PamCredentialID: [ClientIP: 123.123.123.123]

Créer une entrée RDP

Jul 26 13:51:37 10.3.1.4 Devolutions[Server] PersonalConnection - [5] Entrée créée - MessageType: 5, MessageSubType: , UserName: DOMAIN\banderson, MachineName: COMPUTER123, ConnectionName: Server ABC, ConnectionTypeName: RDP (Microsoft Remote Desktop), ConnectionID: da3886a2-e653-4f56-8000-e55e5dc3313a, ConnectionHostName: , ConnectionUserName: , StartDateTime: 7/26/2022 1:51:41 PM, StartDateTimeUTC: , EndDateTime: , EndDateTimeUTC: , GroupName: Training\Operationnels, Comment: , LoggedUserName: banderson@windjammer.co, Prompt: , TickerNumber: , SecurityGroup: , Cost: , UserInfoID: 04b48fd6-3490-4457-874d-d919a0518cf4, SupportClose: False, CloseMode: , OpenMode: , ClientApplication: RDM, ClientVersion: 2022.2.14.0 , IsEmbedded: , RepositoryID: 22a24c36-837b-4baf-8859-9497902a6de0, PamCredentialID: [ClientIP: 123.123.123.123]

Ouvrir une entrée RDP et une connexion VPN

Jul 26 13:47:24 10.3.1.4 Devolutions[Server] PersonalConnection - [5] Session ouverte - MessageType: 4, MessageSubType: , UserName: DOMAIN\banderson, MachineName: COMPUTER123, ConnectionName: Windjammer23, ConnectionTypeName: RDP (Microsoft Remote Desktop), ConnectionID: 2c3c8c8e-70ed-494f-9680-3b24d7fb0b25, ConnectionHostName: , ConnectionUserName: bob, StartDateTime: 7/26/2022 1:47:28 PM, StartDateTimeUTC: , EndDateTime: , EndDateTimeUTC: , GroupName: Common\Linux (Windjammer23), Comment: , LoggedUserName: banderson@windjammer.co, Prompt: , TickerNumber: , SecurityGroup: , Cost: , UserInfoID: 04b48fd6-3490-4457-874d-d919a0518cf4, SupportClose: True, CloseMode: , OpenMode: 0, ClientApplication: RDM, ClientVersion: 2022.2.14.0 , IsEmbedded: True, RepositoryID: df6637ca-d40a-4251-aa33-0620383153e0, PamCredentialID: [ClientIP: 123.123.123.123]

Jul 26 13:47:21 10.3.1.4 Devolutions[Server] PersonalConnection - [5] VPN opened - MessageType: 8, MessageSubType: , UserName: DOMAIN\banderson, MachineName: COMPUTER123, ConnectionName: Windjammer23, ConnectionTypeName: RDP (Microsoft Remote Desktop), ConnectionID: 2c3c8c8e-70ed-494f-9680-3b24d7fb0b25, ConnectionHostName: , ConnectionUserName: bob, StartDateTime: 7/26/2022 1:47:25 PM, StartDateTimeUTC: , EndDateTime: , EndDateTimeUTC: , GroupName: Common\Linux (Windjammer23), Comment: , LoggedUserName: banderson@windjammer.co, Prompt: , TickerNumber: , SecurityGroup: , Cost: , UserInfoID: 04b48fd6-3490-4457-874d-d919a0518cf4, SupportClose: , CloseMode: , OpenMode: , ClientApplication: RDM, ClientVersion: 2022.2.14.0 , IsEmbedded: , RepositoryID: df6637ca-d40a-4251-aa33-0620383153e0, PamCredentialID: [ClientIP: 123.123.123.123]

Connexion refusée à la ressource

Jul 26 13:46:19 10.3.1.4 Devolutions[Server] PersonalConnection - [5] Accès refusé - Not allowed to view entry - MessageType: 66, MessageSubType: 6626, UserName: banderson@windjammer.co, MachineName: 123.123.123.123, ConnectionName: , ConnectionTypeName: , ConnectionID: , ConnectionHostName: , ConnectionUserName: , StartDateTime: 7/26/2022 1:46:19 PM, StartDateTimeUTC: , EndDateTime: , EndDateTimeUTC: , GroupName: , Comment: , LoggedUserName: banderson@windjammer.co, Prompt: , TickerNumber: , SecurityGroup: , Cost: , UserInfoID: 04b48fd6-3490-4457-874d-d919a0518cf4, SupportClose: , CloseMode: , OpenMode: , ClientApplication: Web, ClientVersion: 2022.2.6.0 , IsEmbedded: , RepositoryID: , PamCredentialID: [ClientIP: 123.123.123.123]