ERPS Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

ERPS Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 8501, 8502, 8503, 8504, 8505, 8506, 8507, 8508, 8509, 8510, 8511, 8512, 8513, 8514, 8515

Severity

<severity>

Text/String

For All: Information
For 8501, 8502:  Warning

Message

<subject>
<object>

Text/String

Event ID 8501:
Log event when RAPS messages are not received for a certain time interval

<subject>
<object>

Text/String

Event ID 8502:
Log event when a ring misconfiguration happens

<subject>
<status>
<object>
<objecttype>

Text/String

Event ID 8503:
Log state transition of ring instance

<subject>
<dinterface>

Text/String

Event ID 8504:
Log event when ring is configured with a non-L2 port

<subject>
<dinterface>
<object>
<dport>

Text/String

Event ID 8505:
Log event when an interface which is already associated to a ring port is getting mapped
to other ring port as well

<subject>
<object>
<objecttype>

Text/String

Event ID 8506:
Log event when control-channel VLAN is part of the protected-VLANs

<subject>
<object>
<objecttype>

Text/String

Event ID 8507:
Log event when control-channel VLAN overlaps with another control-channel of same ring

<subject>
<object>
<objecttype>

Text/String

Event ID 8508:
Log event when protected-VLAN(s) overlap

<subject>

Text/String

Event ID 8509:
Log event when same control-channel VLAN is configured on both major and sub-rings

<subject>
<object>

Text/String

Event ID 8510:
Log event when parent-ring id is configured to be the same as sub-ring

<subject>

Text/String

Event ID 8511:
Log event when VLAN from the protected-VLANs list is already configured as control-channel
VLAN

<subject>
<dport>
<objecttype>

Text/String

Event ID 8512:
Log event if the same ring port is configured as RPL port for more than one instance

<subject>
<dinterface>

Text/String

Event ID 8513:
Log event if ring port which is also an ISL is being configured as RPL

<subject>

Text/String

Event ID 8514:
Log event if protected-VLAN set of sub-ring is not a subset of the major-ring

<subject>
<reason>
<object>
<objecttype>

Text/String

Event ID 8515:
Log transition of state of ring instance to initializing and the reason for it