ASA-5-713041 : IKE Rekeying Messages

Classification

Rule Name	Rule Type	Common Event	Classification
ASA-5-713041 : IKE Rekeying Messages	Base Rule	IKE Initiator Rekeying Phase	Activity
IKE Rekeying Phase 1	Sub Rule	IKE Initiator: Phase 1 Negotiation	Activity
IKE Rekeying Phase 2	Sub Rule	IKE Initiator: Phase 2 Negotiation	Activity

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
713041	<vmid>	Number
N/A	<dip>	Number
N/A	<group>	Number
N/A	<tag1>	Text/String
N/A	<tag2>	Text/String
N/A	<tag3>	Number

×