Breadcrumbs

ERPS Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

ERPS Events

Base Rule

General Information Log Message

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 8501, 8502, 8503, 8504, 8505, 8506, 8507, 8508, 8509, 8510, 8511, 8512, 8513, 8514, 8515

Severity

<severity>

Text/String

For All: Information
For 8501, 8502:  Warning

Message

<subject>
<object>

Text/String

Event ID 8501:
Log event when RAPS messages are not received for a certain time interval

 

<subject>
<object>

Text/String

Event ID 8502:
Log event when a ring misconfiguration happens

 

<subject>
<status>
<object>
<objecttype>

Text/String

Event ID 8503:
Log state transition of ring instance

 

<subject>
<dinterface>

Text/String

Event ID 8504:
Log event when ring is configured with a non-L2 port

 

<subject>
<dinterface>
<object>
<dport>

Text/String

Event ID 8505:
Log event when an interface which is already associated to a ring port is getting mapped
to other ring port as well

 

<subject>
<object>
<objecttype>

Text/String

Event ID 8506:
Log event when control-channel VLAN is part of the protected-VLANs

 

<subject>
<object>
<objecttype>

Text/String

Event ID 8507:
Log event when control-channel VLAN overlaps with another control-channel of same ring

 

<subject>
<object>
<objecttype>

Text/String

Event ID 8508:
Log event when protected-VLAN(s) overlap

 

<subject>

Text/String

Event ID 8509:
Log event when same control-channel VLAN is configured on both major and sub-rings

 

<subject>
<object>

Text/String

Event ID 8510:
Log event when parent-ring id is configured to be the same as sub-ring

 

<subject>

Text/String

Event ID 8511:
Log event when VLAN from the protected-VLANs list is already configured as control-channel
VLAN

 

<subject>
<dport>
<objecttype>

Text/String

Event ID 8512:
Log event if the same ring port is configured as RPL port for more than one instance

 

<subject>
<dinterface>

Text/String

Event ID 8513:
Log event if ring port which is also an ISL is being configured as RPL

 

<subject>

Text/String

Event ID 8514:
Log event if protected-VLAN set of sub-ring is not a subset of the major-ring

 

<subject>
<reason>
<object>
<objecttype>

Text/String

Event ID 8515:
Log transition of state of ring instance to initializing and the reason for it