Classification
|
Rule Name |
Rule Type |
Common Event |
Classification |
|---|---|---|---|
|
Hostd Probe Information |
Base Rule |
General Process Information |
Information |
|
Current Working Directory |
Sub Rule |
Directory Information |
Information |
|
Detected Multiple Threads |
Sub Rule |
Thread Report |
Information |
|
Timeout Value Changed |
Sub Rule |
Timeout Period Is Too Small |
Information |
|
Initialized Channel Manager |
Sub Rule |
Initialize |
Information |
|
Logging Fast Path |
Sub Rule |
General Logging Information |
Information |
|
Successfully Acquired Hardware |
Sub Rule |
General Hardware Configuration Information |
Information |
|
Certificate Verification Disabled |
Sub Rule |
Policy Disabled : System |
Policy |
|
Unrecognized Log/Level |
Sub Rule |
Unrecognized Message Received |
Warning |
|
Handling Logs |
Sub Rule |
General Logging Information |
Information |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
Schema Description |
|---|---|---|---|
|
Severity |
<severity> |
Number/Text/String |
Severity information |
|
tag1 |
<tag1> |
Text/String |
N/A |
|
Object |
<object> |
Text/String |
N/A |
|
Process |
<process> |
Text/String |
N/A |
|
Milliseconds |
<milliseconds> |
Number |
N/A |
|
Objectname |
<objectname> |
Text/String |
N/A |
|
Version |
<version> |
Number |
N/A |