CoPP Events
Vendor Documentation
https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf |
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
CoPP Events | Base Rule | General COPP Message | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
Event ID | <vmid> | Number | Event ID 1501, 1502, 1503, 1504, 1505, 1506, 1507, 1508, 1509, 1510, 1511, 1512, 1513 |
Severity | <severity> | Text/String | For All: Information |
Message | <subject> | Text/String | Event ID 1501: |
| <subject> | Text/String | Event ID 1502: |
| <subject> | Text/String | Event ID 1503: |
| <subject> | Text/String | Event ID 1504: |
| <subject> | Text/String | Event ID 1505: |
| <subject> | Text/String | Event ID 1506: |
| <subject> | Text/String | Event ID 1507: |
| <subject> | Text/String | Event ID 1508: |
| <subject> | Text/String | Event ID 1509: |
| <subject> | Text/String | Event ID 1510: |
| <subject> | Text/String | Event ID 1511: |
| <subject> | Text/String | Event ID 1512: |
| <subject> | Text/String | Event ID 1513: |