IPSec Security Association Messages

Rule Name

Rule Type

Common Event

Classification

IPSec Security Association Messages

Base Rule

IPSec Security Association

Information

IPSec Security Association Created

Sub Rule

Trust Relationship Established

Access Granted

IPSec Security Association Deleted

Sub Rule

Trust Relationship Revoked

Access Revoked

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<sip>

Number

N/A

<dip>

Number

N/A

<dname>

Text/String

N/A

<login>

Text/String

N/A

<session>

Text/String

N/A

<tag1>

Text/String

N/A

<tag2>

Text/String