User audit information (successful connections/failures/activity logs)

Type	Field	Display Name	Description
DATE	_time	Time
STRING	sensor_id	Sensor ID
IP	src_ip	Source IP
PORT	src_port	Source Port
IP	dst_ip	Destination IP
PORT	dst_port	Destination Port
STRING	user	User
STRING	menu	Menu
STRING	action	Action
STRING	msg	Message
INT	fail_count	Failure Count