IPSec Access Messages

Classification

Rule Name

Rule Type

Common Event

Classification

IPSec Access Messages

Base Rule

General IPSec Alert

Critical

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<severity>

Text/String

N/A

<dip>

IP Address

N/A

<dname>

Text/String

N/A

<account>

Text/String

N/A

<session>

Text/String

N/A

<process>

Text/String

N/A

<object>

Text/String

N/A

<objectname>

Text/String

N/A

<subject>

Text/String