Skip to main content
Skip table of contents

MACsec Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

MACsec Events

Base Rule

General Information Log Message

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 11201, 11202, 11203, 11204

Severity

<severity>

Text/String

For All: Information

Message

<subject>
<dinterface>
<object>

Text/String

Event ID 11201:
A MACsec session established on an interface.

<subject>
<dinterface>
<object>

Text/String

Event ID 11202:
A Connectivity Association was successfully established on an interface.

<subject>
<dinterface>
<object>

Text/String

Event ID 11203:
A new Secure Association key created for a Connectivity Association.

<subject>
<object>

Text/String

Event ID 11204:
A possible replay attempt detected on a Secure Channel.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.