Adding Query Spec

Classification

Rule Name

Rule Type

Common Event

Classification

Adding Query Spec

Base Rule

Access Object Failure

Audit

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Severity

<severity>

Number/Text/String

 Severity information

Object

<object>

Text/String

N/A

Quantity

<quantity>

Number

N/A