Hardware Switch Controller Sync Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Hardware Switch Controller Sync Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 8801, 8802, 8803, 8804, 8805, 8806, 8807, 8808, 8809, 8810, 8811, 8812

Severity

<severity>

Text/String

For All: Information

Message

<subject>

Text/String

Event ID 8801:
Log when hardware VTEP DB setup is completed

<subject>
<dport>

Text/String/Number

Event ID 8802:
Log when physical port is created in hardware VTEP DB

<subject>
<dport>

Text/String/Number

Event ID 8803:
Log when physical port is deleted from hardware VTEP DB

<subject>

Text/String

Event ID 8804:
Logs when HSC configuration is completed on the switch and pushed to Hardware VTEP DB

<subject>

Text/String

Event ID 8805:
Logs when HSC configuration is deleted from the switch and Hardware VTEP DB

<subject>
<object>
<dmac>

Text/String/Number

Event ID 8806:
Logs when local MAC learn on VLAN is updated in the Hardwar VTEP DB

<subject>
<object>
<dmac>

Text/String/Number

Event ID 8807:
Logs when local MAC learnt on VLAN is removed from the Hardware VTEP DB

<subject>
<dip>

Text/String/IP Address

Event ID 8808:
Logs when VXLAN IP is updated in the Hardware VTEP DB

<subject>
<dip>

Text/String/IP Address

Event ID 8809:
VXLAN IP is removed from Switch and Hardware VTEP DB 

<subject>
<object>
<dmac>

Text/String/Number

Event ID 8810:
Logs when unicast remote MAC learnt on VNI is added to the switch

<subject>
<object>
<dmac>

Text/String/Number

Event ID 8811:
Logs when unicast remote MAC learnt on VNI is removed from the switch

<subject>
<dip>

Text/String/IP Address

Event ID 8812:
Logs when tunnel is removed from Hardware VTEP DB