DateTimeConfig

Classification

Rule Name	Rule Type	Common Event	Classification
DateTimeConfig	Base Rule	Configuration Modified : System	Configuration
Time Zone Changed	Sub Rule	Configuration Modified : System	Configuration
System Time Changed	Sub Rule	Configuration Modified : System	Configuration
Time Source Set	Sub Rule	Configuration Modified : System	Configuration
IRIG Output Enabled	Sub Rule	Configuration Modified : System	Configuration
IRIG Output Disabled	Sub Rule	Configuration Modified : System	Configuration
IRIG Input Offset Changed	Sub Rule	Configuration Modified : System	Configuration
IRIG Output Offset Changed	Sub Rule	Configuration Modified : System	Configuration
NTP Output Enabled	Sub Rule	Configuration Modified : System	Configuration
NTP Output Disabled	Sub Rule	Configuration Modified : System	Configuration
NTP Stratum Changed	Sub Rule	Configuration Modified : System	Configuration
NTP Server Created	Sub Rule	Object Created	Access Success
NTP Server Deleted	Sub Rule	Object Deleted/Removed	Access Success

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<vmid>	Text\String
N/A	<subject>	Text\String
N/A	<sip>	IP Address
N/A	<login>	Text\String
N/A	<tag1>	Text\String

×