External Storage Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

External Storage Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 7801, 7802, 7803, 7804, 7805, 7806

Severity

<severity>

Text/String

For All: Information
For 7801, 7802, 7805:  Error

Message

<subject>
<object>

Text/String

Event ID 7801:
Event raised when a share fails to mount

<subject>
<object>

Text/String

Event ID 7802:
Event raised when a share fails to dismount

<subject>
<object>

Text/String

Event ID 7803:
Event raised when a share mounts

<subject>
<object>

Text/String

Event ID 7804:
Event raised when a share dismounts

<subject>
<object>

Text/String

Event ID 7805:
Event raised when a mount times out or aborts due to a config change

<subject>
<status>

Text/String

Event ID 7806:
USB device mounted or unmounted.