Change Occured

Classification

Rule Name

Rule Type

Common Event

Classification

Change Occured

Base Rule

Service Status Change

Audit : Other Audit Success

Guest Disk Info Changed

Sub Rule

General Disk Information

Information

Guest Heartbeat Status Changed

Sub Rule

Heartbeat Status

Information

Layout Changed

Sub Rule

General Changer Information

Information

Storage Info Changed

Sub Rule

System State Information

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Severity

<severity>

Number/Text/String

 Severity information

Object

<object>

Text/String

N/A

Process

<process>

Text/String

N/A

Subject

<subject>

Text/String

N/A

Tag1

<tag1>

Text/String

N/A