Breadcrumbs

MAC Address Mode Configuration Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

MAC Address Mode Configuration Events

Base Rule

MAC Address Information

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 11001, 11002, 11003

Severity

<severity>

Text/String

For All: Information
For 11003: Warning

Message

<subject>

Text/String

Event ID 11001:
Log event when the MAC Address configured mode is changed


<subject>

Text/String

Event ID 11002:
Log event when the MAC Address operational mode is changed


<subject>
<dmac>
<object>

Text/String

Event ID 11003:
Log event when a local station MAC address cannot be added because the table is full