Allowed Clients Config

Classification

Rule Name

Rule Type

Common Event

Classification

Allowed Clients Config

Base Rule

Configuration Modified : System

Configuration

Allowed Client Created

Sub Rule

Configuration Enabled : System

Configuration

Allowed Client Deleted

Sub Rule

Configuration Deleted : System

Configuration

Allowed Client Changed

Sub Rule

Configuration Modified : System

Configuration

Mapping with LogRhythm Schema  

Device Key in Log Message

Log Value

LogRhythm Schema

Data Type

N/A

N/A

<vmid>

Text\String

N/A

N/A

<login>

Text\String

N/A

N/A

<subject>

Text\String

N/A

N/A

<sip>

Number

N/A

N/A

<object>

Text\String

N/A

N/A

<tag1>

Text\String