Breadcrumbs

IP Tunnels Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

IP Tunnels Events

Base Rule

General Information Log Message

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 9601, 9602, 9603, 9604, 9605, 9606, 9607, 9608, 9609, 9610, 9611, 9612, 9613, 9614, 9615, 9616

Severity

<severity>

Text/String

For All: Information
For 9601, 9603, 9605, 9609, 9611, 9613, 9615: Error

Message

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9601:
Event raised when tunnel creation fails

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9602:
Event raised when tunnel created

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9603:
Event raised when tunnel deletion failed

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9604:
Event raised when tunnel deleted

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9605:
Event raised when tunnel modification failed

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9606:
Event raised when tunnel source ip modified

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9607:
Event raised when tunnel destination ip modified

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9608:
Event raised when tunnel TTL modified

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9609:
Event raised when tunnel mtu modification failed

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9610:
Event raised when tunnel mtu modified

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9611:
Event raised when tunnel nexthop add failed

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9612:
Event raised when tunnel nexthop gets added

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9613:
Event raised when tunnel nexthop modify failed

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9614:
Event raised when tunnel nexthop gets modified

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9615:
Event raised when tunnel nexthop delete failed

 

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9616:
Event raised when tunnel nexthop gets deleted