IKE Receiving/Deleting

Classification

Rule Name	Rule Type	Common Event	Classification
IKE Receiving/Deleting	Base Rule	IKE Information-Only Event	Information
Received A Key Add Message	Sub Rule	General IKE Message	Information
Got SPI From Key Engine	Sub Rule	General IKE Message	Information
IKE Deleting SA	Sub Rule	General IKE Message	Information

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
715006	<vmid>	Number
N/A	<sip>	Number
N/A	<object>	Text/String
N/A	<group>	Number
N/A	<tag1>	Text/String

×