LLDP Events

Vendor Documentation

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Classification

Rule Name	Rule Type	Common Event	Classification
LLDP Events	Base Rule	General LLDP Message	Information

Mapping with LogRhythm Schema

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
Event ID	<vmid>	Number	Event ID 101, 102, 103, 104, 105, 106, 107, 108, 109, 110, 111, 112, 113
Severity	<severity>	Text/String	For All: Information
Message	<subject>	Text/String	Event ID 101: Logs event when LLDP (Link Layer Discovery Protocol) feature is enabled in the switch.
	<subject>	Text/String	Event ID 102: Logs event when LLDP (Link Layer Discovery Protocol) feature is disabled in the switch.
	<subject> <object>	Text/String/Number	Event ID 103: Logs event when the LLDP status update interval is configured by the user.
	<subject> <sinterface> <object>	Text/String/Number	Event ID 104: Logs event when a new neighbor entry is added to the switch.
	<subject> <sinterface> <object>	Text/String/Number	Event ID 105: Logs event when an existing neighbor entry is updated in the switch.
	<subject> <sinterface> <object>	Text/String/Number	Event ID 106: Logs event when an existing neighbor entry is deleted from switch.
	<subject> <sip>	Text/String/IP Address	Event ID 107: Logs event when a new management IP address is configured by the user.
	<subject> <object>	Text/String/Number	Event ID 108: Logs event when LLDP transmit multiplier value is configured by the user.
	<subject> <object>	Text/String/Number	Event ID 109: Logs event when LLDP transmit delay value is configured by the user.
	<subject> <object>	Text/String/Number	Event ID 110: Logs event when LLDP interface reinitialization value is configured by the user.
	<subject>	Text/String	Event ID 111: Logs event when LLDP statistics are cleared from the switch.
	<subject>	Text/String	Event ID 112: Logs event when LLDP neighbor information is cleared from the switch.
	<subject> <sinterface> <object> <dinterface>	Text/String	Event ID 113: Log event when the PVID mismatches between the switch and neighbor over an interface.