Firmware Update Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Firmware Update Events

Base Rule

DHCP Information

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 4401, 4402, 4403, 4404, 4405, 4406, 4407

Severity

<severity>

Text/String

For All: Information
For 4403, 4404, 4405, 4406, 4407:  Error

Message

<subject>
<account>
<objecttype>
<object>
<dname>
<result>

Text/String

Event ID 4401:
Indicates that the switch firmware was succesfully updated from a remote source

<subject>
<account>
<objecttype>
<object>
<result>

Text/String

Event ID 4402:
Indicates that the switch firmware was succesfully updated from a local source

<subject>
<account>
<objecttype>
<object>
<dname>

Text/String

Event ID 4403:
Indicates that a switch firmware update failed from a remote source

<subject>
<account>
<objecttype>
<object>
<dname>

Text/String

Event ID 4404:
Indicates that a switch firmware update failed from a local source

<subject>

Text/String

Event ID 4405:
Indicates that a the signature verification check during switch firmware update failed

<subject>

Text/String

Event ID 4406:
Indicates that firmware image downloaded for update is not compatible with hardware

<subject>

Text/String

Event ID 4407:
Logs event when a packet drop is detected for MAC Lockout MAC as source address.