Accounting Events

https://arubanetworking.hpe.com/techdocs/AOS-CX/10.16/PDF/elmrg.pdf

Accounting Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 13101, 13102, 131013

Severity

<severity>

Text/String

For All: Information

Message

<subject>
<dip>
<account>

Text/String/IP Address

Event ID 13101:
Logs a message when a SSH session timed out due to the session being idle

<subject>
<dip>
<account>

Text/String/IP Address

Event ID 13102:
Logs a message when a TELNET session timed out due to the session being idle

<subject>
<dip>
<account>

Text/String/IP Address

Event ID 13103:
Logs a message when a CONSOLE session timed out due to the session being idle