Classification
|
Rule Name |
Rule Type |
common event |
Classification |
|---|---|---|---|
|
Logical Volume Manager Message |
Base Rule |
General Information |
Information |
|
Volume Booted |
Sub Rule |
Process/Service Started |
Startup and Shutdown |
|
Volume Created |
Sub Rule |
Object Created |
Access Success |
|
Volume Removed |
Sub Rule |
Object Deleted/Removed |
Access Success |
|
Volume Boot Command |
Sub Rule |
Process/Service Started |
Startup and Shutdown |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
|
N/A |
<dname> |
Text/String |
|
N/A |
<process> |
Number |
|
N/A |
<tag1> |
N/A |
|
N/A |
<object> |
Text/String |