DHCP Server Events
Vendor Documentation
https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf |
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
DHCP Server Events | Base Rule | DHCP Information | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
Event ID | <vmid> | Number | Event ID 1901, 1902, 1903, 1904, 1905, 1906, 1907, 1908, 1909, 1910, 1911 |
Severity | <severity> | Text/String | For All: Information |
Message | <subject> | Text/String/IP Address | Event ID 1901: |
| <subject> | Text/String/IP Address | Event ID 1902: |
| <subject> | Text/String/IP Address | Event ID 1903: |
| <subject> | Text/String/IP Address | Event ID 1904: |
| <subject> | Text/String/IP Address | Event ID 1905: |
| <subject> | Text/String/IP Address | Event ID 1906: |
| <subject> | Text/String | Event ID 1907: |
| <subject> | Text/String | Event ID 1908: |
| <subject> | Text/String | Event ID 1909: |
| <subject> | Text/String | Event ID 1910: |
| <subject> | Text/String | Event ID 1911: |