Skip to main content
Skip table of contents

Interface Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

Interface Events

Base Rule

General Interface Log

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 401, 402, 403, 404, 405, 406, 407, 408

Severity

<severity>

Text/String

For All: Information
For 405: Error
For 408: Warning

Message

<subject>
<dinterface>

Text/String

Event ID 401:
Log when interface port_admin set to up

 

<subject>
<dinterface>

Text/String

Event ID 402:
Log when interface port_admin set to down

 

<subject>
<dinterface>

Text/String

Event ID 403:
Log when interface link status is up

 

<subject>
<dinterface>
<status>

Text/String

Event ID 404:
Log when interface link status is down

 

<subject>

Text/String

Event ID 405 (Severity: Error):
Log when Reserved for future use

 

<subject>
<dinterface>

Text/String

Event ID 406:
Log when interface encountered an error that requires user intervention

 

<subject>
<dinterface>
<result>

Text/String

Event ID 407:
Log when interface encountered a downshift

 

<subject>
<dinterface>

Text/String

Event ID 408 (Severity: Warning):
Log when interface is down due to incompatible MACsec and PFC configuration

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.