Skip to main content
Skip table of contents

MAC Learning Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

MAC Learning Events

Base Rule

General Information Log Message

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 4801, 4802, 4803, 4804, 4805

Severity

<severity>

Text/String

For All: Information

Message

<subject>
<dmac>
<sinterface>
<dinterface>
<object>

Text/String

Event ID 4801:
Event raised when L2 mac move

<subject>
<object>

Text/String

Event ID 4802:
Event raised when L2 MAC table is flushed with vlan delete event or clear mac-address command from vtysh

<subject>
<sinterface>

Text/String

Event ID 4803:
Event raised when L2 MAC table is flushed with port move to L3 event or clear mac address command from vtysh

<subject>
<sinterface>

Text/String

Event ID 4804:
Event raised when L2 MAC table is flushed with port down event or clear mac-address command from vtysh

<subject>
<object>

Text/String

Event ID 4805:
Event raised when L2 MAC table is flushed with vlan down event or clear mac-address command from vtysh

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.