Compliance Check Messages

Vendor Documentation

Rule Name	Rule Type	Common Event	Classification
Compliance Check Messages	Base Rule	General Policy Compliance Information	Other Audit
Compliance Passed	Sub Rule	Compliance Success	Other Operations
Compliance Failed	Sub Rule	Compliance Failure	Error

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
level	<severity>	Text/String	Each log entry contains a Level (level) field that indicates the estimated severity of the event that caused the log entry.
logid	<vmid>	Number	The ID (logid) is a 10-digit field. It is a unique identifier for that specific log.
vd	<domainorigin>	Text/String	Name of the virtual domain in which the log message was recorded.
action	<process>	Text/String	N/A
result	<object>	Text/String	N/A
msg	<subject>	Text/String	Message