Connection Information 3

Connection Information

Base Rule

Port Access Failure

Other Audit Failure

Connection Refused

Sub Rule

Traffic Denied by Network Firewall

Network Deny

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<severity>

Text/String

N/A

<sip>

IP Address

N/A

<sname>

Text/String

N/A

<dip>

IP Address

N/A

<sport>

Number

N/A

<protname>

Text/String

N/A

<domain>

Text/String

N/A

<process>

Text/String

N/A

<processid>

Number

N/A

<subject>

Text/String

N/A

<command>

Text/String