auth - Authentication

This group includes tables that start with the level auth. These tables receive data generated by authentication services and systems.

Company	Product / Service	Data tables

Company	Product / Service	Data tables
-	-	`auth.all` Union table - auth.all This is a union table that collects events from a set of tables for easy access and analysis. Learn more about this union table in this article.
-	-	`auth.unix` Union table - auth.unix This is a union table that collects events from a set of tables for easy access and analysis. Learn more about this union table in this article.
	1Password	`auth.agilebits.onepassword.audit` `auth.agilebits.onepassword.itemusage` `auth.agilebits.onepassword.signinattempt` More information
	Auth0 platform	`auth.auth0.events` More information
	Bitwarden	`auth.bitwarden.api.event` `auth.bitwarden.api.member` More information
	Cisco Identity Services Engine	`auth.cisco.acs` `auth.cisco.ise` More information
	Duo platform	`auth.duo.administrator` `auth.duo.administrator.events` `auth.duo.administrator.login` `auth.duo.authentication.events` `auth.duo.authenticationProxy.events` `auth.duo.telephony.events` More information
	IBM Security Access Manager	`auth.ibm.isam.events` More information
	JumpCloud	`auth.jumpcloud.all.events` Union table - auth.jumpcloud.all.events This is a union table that collects events from a set of tables for easy access and analysis. Learn more about this union table in this article. `auth.jumpcloud.directory.events` `auth.jumpcloud.ldap.events` `auth.jumpcloud.mdm.events` `auth.jumpcloud.radius.events` `auth.jumpcloud.software.events` `auth.jumpcloud.sso.events` `auth.jumpcloud.systems.events` More information
	Keeper Security Audit	`auth.keepersecurity.audit.events` More information
	Keycloak	`auth.keycloak.user.event` More information
	LoginRadius	`auth.loginradius.audit` More information
	Okta Authentication Server	`auth.okta` `auth.okta.apps` `auth.okta.asa_events` `auth.okta.clients` `auth.okta.events` `auth.okta.groups` `auth.okta.idps` `auth.okta.policies` `auth.okta.system` `auth.okta.users` `auth.okta.zones` More information
	One Identity Defender Security Server	`auth.oneidentity.defender.securityserver` More information
	One Identity Safeguard	`auth.oneidentity.safeguard.events` More information
	OneLogin	`auth.onelogin.api_auth` `auth.onelogin.apps` `auth.onelogin.connectors` `auth.onelogin.events` `auth.onelogin.privileges` `auth.onelogin.users` `auth.onelogin.vigilance` More information
	PingFederate	`auth.ping.federate.audit` `auth.ping.federate.security_audit` `auth.ping.federate.server` More information
	PingID	`auth.ping.id.mfa` More information
	RSA Authentication Manager	`auth.rsa.rsaam.manager` More information
	RSA SecurID	`auth.rsa.secureid` `auth.rsa.secureid.admin` `auth.rsa.secureid.runtime` `auth.rsa.secureid.system` `auth.rsa.secureid.trace` More information
	SecureAuth identity platform	`auth.secureauth.events` `auth.secureauth.radius` More information
	SecurIdentity platform	`auth.securenvoy` `auth.securenvoy.admin` `auth.securenvoy.batch` `auth.securenvoy.enrol` `auth.securenvoy.radius` `auth.securenvoy.syslog` `auth.securenvoy.websms` More information
	Delinea (formerly Thycotic) Secret Server	`auth.thycotic.secretserver` More information
	Transmit Security FlexID	`auth.transmit.flexid.events` More information