log-clear

Description

An audit log was cleared

Parameters

Parameter	Value
Subject	log
Activity	clear
Activity Type	log-clear
Pretty Name	Log Clear

Legacy Names

Success	Fail
audit-log-clear	audit-log-clear

Fields

The possible fields for this activity type will vary depending on whether the activity was a success or a fail.

log-clear:success

Field	Core	Detection	Informational
local_user_name
src_host		✓
user		✓

log-clear:fail

Field	Core	Detection	Informational
failure_code		✓
local_user_name
failure_reason		✓
src_host		✓
user		✓