General Kernel Messages

Classification

Rule Name	Rule Type	Common Event	Classification
General Kernel Messages	Base Rule	Kernel Information	Information
Kernel : Audit Notice	Sub Rule	General Audit	Other Audit Success
Kernel : Storage Block Information	Sub Rule	General Mass Storage Information	Information
Kernel : CCISS Has Check Condition	Sub Rule	Raid Failed To Update State	Warning
Kernel : Storage Head/Cylinder/Sector Info	Sub Rule	General Mass Storage Information	Information
Kernel : General Warning	Sub Rule	General Kernel Warning	Warning

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text\String
N/A	<dname>	Text\String
N/A	<vmid>	Text\String
N/A	<process>	Text\String
N/A	<processid>	Number
N/A	<command>	Text\String
N/A	<object>	Text\String
N/A	<subject>	Text\String
N/A	<amount>	Number
N/A	<quantity>	Number
N/A	<size>	Number
N/A	<tag1>	Text\String
N/A	<tag2>	Text\String
N/A	<tag3>	Text\String

×