IP Tunnels Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

IP Tunnels Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 9601, 9602, 9603, 9604, 9605, 9606, 9607, 9608, 9609, 9610, 9611, 9612, 9613, 9614, 9615, 9616

Severity

<severity>

Text/String

For All: Information
For 9601, 9603, 9605, 9609, 9611, 9613, 9615: Error

Message

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9601:
Event raised when tunnel creation fails

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9602:
Event raised when tunnel created

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9603:
Event raised when tunnel deletion failed

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9604:
Event raised when tunnel deleted

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9605:
Event raised when tunnel modification failed

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9606:
Event raised when tunnel source ip modified

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9607:
Event raised when tunnel destination ip modified

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9608:
Event raised when tunnel TTL modified

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9609:
Event raised when tunnel mtu modification failed

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9610:
Event raised when tunnel mtu modified

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9611:
Event raised when tunnel nexthop add failed

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9612:
Event raised when tunnel nexthop gets added

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9613:
Event raised when tunnel nexthop modify failed

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9614:
Event raised when tunnel nexthop gets modified

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9615:
Event raised when tunnel nexthop delete failed

<subject>
<objectname>
<objecttype>
<object>
<sip>
<dip>

Text/String/IP Address

Event ID 9616:
Event raised when tunnel nexthop gets deleted