HTTPS Server Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

HTTPS Server Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 5601, 5602, 5603, 5604, 5605

Severity

<severity>

Text/String

For All: Information

Message

<subject>
<account>
<action>

Text/String

Event ID 5601:
Logs a message when a user changes the status of the REST mode

<subject>
<account>
<status>
<object>

Text/String

Event ID 5602:
Logs a message when a user enables/disables the https-server VRF configuration

<subject>
<account>

Text/String

Event ID 5603:
Logs a message when a user closes all HTTPS sessions

<subject>
<account>
<session>

Text/String

Event ID 5604:
Logs a message when a user changes the maximum amount of sessions per user

<subject>
<account>

Text/String

Event ID 5605:
Logs a message when a user changes the value of the session idle timeout