ACS (SLES 15)模块管理包语言包

Microsoft.ACS.Linux.SLES.15 :: 10.19.1008.0 (Management Pack)

此管理包用于从 UNIX/Linux (SLES 15) 计算机中收集可审核的系统日志并将这些日志写入安全事件日志。

• Show Management Pack XML
• Get Management Pack data in Excel format
• Download: Microsoft.ACS.Linux.SLES.15.mp

Management Pack Elements

Classes (1)

	DisplayName	ID	Base Class	Abstract	Hosted	Singleton	Group	Extension	Accessibility
	SLES 15 ACS 终结点	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	Microsoft.ACS.Unix.ACSEndPoint	False	True	False	False	False	Public

Discoveries (1)

	DisplayName	ID	Target	Enabled
	发现 SUSE Linux Enterprise Server 15 ACS 终结点	Microsoft.ACS.Linux.SLES.15.ACSEndPoint.Discovery	Microsoft.ACS.Unix.ACSEndPoint	True

Rules (21)

	DisplayName	ID	Target	Category	Enabled	Alert Generate
	添加组(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Adding.Group	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	添加用户(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Adding.User	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	向组添加用户(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Adding.User.To.Group	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	失败的控制台登录(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Console.Failed	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	失败的控制台登录(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Console.Invalid	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	删除组(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Deleting.Group	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	删除用户(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Deleting.User	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	从组中删除用户(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Deleting.User.From.Group	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	密码更改失败(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Password.Change.Failed	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	根用户密码更改成功(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Password.Change.From.Root.Succeeded	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	非根用户密码更改成功(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Password.Change.From.User.Succeeded	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	密码更改最大尝试次数(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Password.Change.Maximum.Tries	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	失败的 ssh 登录(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Ssh.Failed	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	无效的 ssh 登录(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Ssh.Invalid	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	成功的 ssh 登录(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Ssh.Succeeded	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	Su 失败(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Su.Failed	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	Su 成功(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Su.Succeeded	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	经过一或两次尝试(密码)后 sudo 失败(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Sudo.Conversation.Error	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	Sudo 失败(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Sudo.Failed	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	Sudo 无效(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Sudo.Invalid	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False
	Sudo 成功(SUSE Linux Enterprise Server 15)	Microsoft.ACS.Linux.SLES.15.Sudo.Succeeded	Microsoft.ACS.Linux.SLES.15.ACSEndPoint	EventCollection	True	False