Skip to main content
Skip table of contents

Compliance Messages

Vendor Documentation

N/A

Classification

Rule Name

Rule Type

Common Event

Classification

Compliance Messages

Base Rule

General Policy Compliance Information

Other Audit

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

N/A

N/A

N/A

N/A

N/A

N/A

Device Vendor

product_name

<vendorinfo>

Text/String

N/A

oci_version

<version>

Text/String

N/A

risk_type_description

<vmid>

Text/String

N/A

event_sub_category

<object>

Text/String

N/A

Severity

<severity>

Number

Severity level; ranges from 1 to 10 (critical).

type

<objecttype>

Number

Can be:
0—Base event.
1—Aggregate event

Desc

<subject>

N/A

N/A

Dhost

<dname>

Text/String

Resolved IPv4 server address.
Present only for Threat Intelligence when both host and server are present.
dvchost will not be present in this case.

dst

<dip>

IP Address

Unresolved IPv4 server address.
Present only for Threat Intelligence when both host and server are present.
dvchost will not be present in his case. dhost will be present.

dstHostGroup

N/A

N/A

N/A

app

<protname>

Text/String

Protocol/Application

interfaceCount

<quantity>

Number

N/A

violationCount

N/A

N/A

N/A

start

N/A

N/A

Start time of event.

end

N/A

N/A

End time of event.

url

<url>

Text/String

N/A

hostgroupCount

N/A

N/A

Number of host groups encountered in given interval.
For base events it is always 1. Applicable to all risk types.

appcount

N/A

N/A

N/A

dstCount

N/A

N/A

N/A

dstHostGroupCount

N/A

N/A

N/A

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.