Fault Monitor Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Fault Monitor Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 11101, 11102, 11103, 11104, 11105, 11106, 11107, 11108, 11109

Severity

<severity>

Text/String

For All: Information
For 11101, 11102, 11106:  Warning

Message

<subject>
<dinterface>
<result>

Text/String

Event ID 11101:
Logs event when a fault is detected on an interface.

<subject>
<dinterface>
<result>

Text/String

Event ID 11102:
Logs event and shutdown the interface when a fault is detected on an interface.

<subject>
<dinterface>
<result>

Text/String

Event ID 11103:
Interface is auto-enabled on timer expiry.

<subject>
<dinterface>
<result>

Text/String

Event ID 11104:
Interface is auto-enabled on profile configuration change.

<subject>
<dinterface>

Text/String

Event ID 11105:
Interface is auto-enabled on admin state change.

<subject>
<dinterface>
<result>

Text/String

Event ID 11106:
Logs event when disabling of a faulty interface failed.

<subject>
<dmac>
<amount>

Text/String/Number

Event ID 11107:
Logs event when a packet drop is detected for MAC Lockout MAC as source address.

<subject>
<dmac>
<amount>

Text/String/Number

Event ID 11108:
Logs event when a packet drop is detected for MAC Lockout MAC as destination address.

<subject>
<dmac>
<amount>

Text/String/Number

Event ID 11109:
Logs event when a packet drop is detected for MAC Lockout.