Skip to main content
Skip table of contents

EVID : 20559|20500|20503|20504 Device Logs

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

EVID : 20559|20500|20503|20504 Device LogsBase RuleInformationGeneral Information
EPO FRP - Device InsertedSub RuleInformationUSB Device Connected
EPO FRP - Device InitializedSub RuleInformationDevice Initializing
EPO FRP - Device EjectedSub RuleInformationUSB Device Disconnected
EPO FRP - Device AuthorizationSub RuleInformationGeneral Information

Mapping with LogRhythm Schema 

Device Key in Log MessageLogRhythm SchemaData TypeSchema Description
AgentGUIDN/AN/AUnique identifier of the agent that forwarded the event.
MachineName<dname>Text/StringName of the system hosting the detecting product.
RawMACAddress<dmac>Text/StringMAC address of the system hosting the detecting product.
IPAddress<dip>IP AddressIP address of the system hosting the detecting product (if given in the event).
AgentVersionN/AN/AN/A
OSNameN/AN/AN/A
TimeZoneBiasN/AN/AN/A
UserName<domainimpacted>
<account>
Text/StringN/A
ProductName<vendorinfo>Text/StringName of the detecting managed product.
ProductVersion<version>Text/String/NumberVersion number of the detecting product.
ProductFamilyN/AN/AN/A
EventID<vmid>NumberUnique identifier of the event class.
Severity<severity>Text/String/NumberN/A
GMTTimeN/AN/AN/A
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.