Skip to main content
Skip table of contents

Arpwatch Process

Classification

Rule Name

Rule Type

Common Event

Classification

Arpwatch ProcessBase RuleGeneral Process InformationInformation
Hostname ChangedSub RuleHost Information ChangedInformation
Changed Ethernet AddressSub RuleIP Address ChangedInformation
Flip FlopSub RuleIP Address ChangedInformation
Reused Old Ethernet AddressSub RuleReused IP AddressInformation
Arpwatch BogonSub RuleGeneral Traffic LogNetwork Traffic

Mapping of Arpwatch Process with LR Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<severity>Text\String
N/A<sip>Ip Address
N/A<sname>Text\String
N/A<dname>Text\String
N/A<smac>Text\String
N/A<dmac>Text\String
N/A<process>Text\String
N/A<tag1>Text\String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.