Commissioning

Classification

Rule Name

Rule Type

Common Event

Classification

Commissioning

Base Rule

General Commissioning Log

Information

Attempt To Access Pre-Commissioning Page

Sub Rule

Attempt To Access Pre-Commissioning Page

Other Audit

Attempt To Access Device Configuration Page

Sub Rule

Attempt To Access Device Configuration Page

Other Audit

Device Reset Initiated

Sub Rule

System Startup Or Shutdown Activity

Startup and Shutdown

Device Commissioned

Sub Rule

Device Commissioned

Other Audit Success

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Text\String

N/A

<sip>

IP Address

N/A

<login>

Text\String

N/A

<subject>

Text\String

N/A

<tag1>

Text\String

N/A

<tag2>

Text\String