Skip to main content
Skip table of contents

Layer 3 Interface Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

Layer 3 Interface Events

Base Rule

General Interface Log

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 1701, 1702, 1703, 1704, 1705, 1706, 1707, 1708, 1709, 1710, 1711, 1712, 1713, 1714, 1715, 1716, 1717, 1718, 1719, 1720, 1721, 1722, 1723, 1724, 1725, 1726, 1727, 1728, 1729, 1730, 1731

Severity

<severity>

Text/String

For All: Information
For 1704, 1705, 1706,1707, 1709, 1711, 1712, 1718, 1719, 1720, 1722, 1731: Error

Message

<subject>
<dinterface>

Text/String

Event ID 1701:
logs to create L3 interface.

<subject>
<dinterface>

Text/String

Event ID 1702:
logs to delete L3 interface.

<subject>
<dinterface>
<status>

Text/String

Event ID 1703:
logs for admin state of L3 interface.

<subject>
<object>
<dinterface>

Text/String/Number

Event ID 1704:
logs errors while creating vlan for layer 3 interfaces.

<subject>
<object>
<dinterface>
<result>

Text/String/Number

Event ID 1705:
logs errors while destroying vlan for layer 3 interfaces.

<subject>
<dinterface>
<result>

Text/String

Event ID 1706:
logs errors while destroying layer 3 interface.

<subject>
<dip>
<result>

Text/String/IP Address

Event ID 1707:
logs errors while adding l3 hosts.

<subject>
<dip>

Text/String/IP Address

Event ID 1708:
logs while adding l3 hosts.

<subject>
<dip>
<result>

Text/String/IP Address

Event ID 1709:
logs errors while deleting l3 hosts.

<subject>
<dip>

Text/String/IP Address

Event ID 1710:
logs while deleting l3 hosts.

<subject>
<dip>

Text/String/IP Address

Event ID 1711:
logs errors to get L3 host hit for a specific ip.

<subject>
<result>

Text/String

Event ID 1712:
logs for L3 setup errors.

<subject>
<object>

Text/String/Number

Event ID 1713:
logs for nexthop addition.

<subject>

Text/String

Event ID 1714:
logs for nexthop deletion.

<subject>

Text/String

Event ID 1715:
logs for route addition.

<subject>
<status>

Text/String

Event ID 1716:
logs for route update.

<subject>

Text/String

Event ID 1717:
logs for route deletion.

<subject>
<result>

Text/String

Event ID 1718:
logs error for route deletion.

<subject>
<result>

Text/String

Event ID 1719:
logs error for route addition.

<subject>
<result>
<dport>

Text/String/Number

Event ID 1720:
logs errors for egress object creation.

<subject>
<object>
<dport>
<dinterface>

Text/String/Number

Event ID 1721:
logs for egress object creation.

<subject>
<dport>
<result>

Text/String/Number

Event ID 1722:
logs errors for egress object deletion.

<subject>
<object>
<dport>

Text/String/Number

Event ID 1723:
logs for egress object deletion.

<subject>
<dip>
<dinterface>

Text/String/IP Address

Event ID 1724:
logs for ipv4 address update on interface.

<subject>
<dip>
<dinterface>

Text/String/IP Address

Event ID 1725:
logs for ipv6 address update on interface.

<subject>
<dip>
<dinterface>

Text/String/IP Address

Event ID 1726:
logs for ipv4 address delete from interface.

<subject>
<dip>
<dinterface>

Text/String/IP Address

Event ID 1727:
logs for ipv6 address delete from interface.

<subject>
<dip>
<dinterface>
<status>

Text/String/IP Address

Event ID 1728:
Event raised when ipv6 address status changes

<subject>
<dip>
<dinterface>

Text/String/IP Address

Event ID 1729:
logs for secondary ipv4 address update on interface.

<subject>
<dip>
<dinterface>

Text/String/IP Address

Event ID 1730:
logs for secondary ipv4 address delete from interface.

<subject>

Text/String

Event ID 1731:
Logs failure while configuring hardware for IPMTU.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.