receive network.events.FailureEvent in EXTREME;
receive network.events.LoginFromBlacklistEvent in EXTREME;
receive network.events.MarkFailEvent in EXTREME;
receive network.events.PortscanEvent in EXTREME;

receive network.events.AbnormalRootLoginEvent in CRITICAL;
receive network.events.IPEEvent in CRITICAL;
receive network.events.UserSwitchToRootEvent in CRITICAL;
receive network.events.OutsideAndLocalLoginEvent in CRITICAL;

receive network.events.FingerprintEvent in WARNING;
receive network.events.MultipleAccountSwitchEvent in WARNING;
receive network.events.MultipleUserLoginFailureEvent in WARNING;
receive network.events.MultipleLoginFailureFromSameLocationEvent in WARNING;
#receive network.events.RemoteLoginEvent in WARNING;
receive network.events.RemoteUserSwitchEvent in WARNING;

receive network.events.MultipleLoginAttemptsEvent in MODERATE;
receive network.events.OutsideDomainLoginEvent in MODERATE;
receive network.events.RunawayProcessEvent in MODERATE;
receive network.events.UserSwitchConfirmAttemptEvent in MODERATE;

receive network.events.DiskFullEvent in SYSTEM;
receive network.events.FileSystemFullEvent in SYSTEM;
receive network.events.TerminateAgentEvent in SYSTEM;

#receive network.events.AgentAliveEvent in TEST;
#receive network.events.AjantaWatcherEvent in TEST;
#receive network.events.AjantaResourceEvent in TEST;
#receive network.events.AgentServerLogEvent in TEST;