Mirroring Events
Vendor Documentation
https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf |
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
Mirroring Events | Base Rule | General Information Log Message | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
Event ID | <vmid> | Number | Event ID 6701, 6702, 6703, 6704, 6705, 6706 |
Severity | <severity> | Text/String | For All: Information |
Message | <subject> | Text/String/Number | Event ID 6701: |
<subject> | Text/String/Number | Event ID 6702: | |
<subject> | Text/String/Number | Event ID 6703: | |
<subject> | Text/String/Number | Event ID 6704: | |
<subject> | Text/String/Number | Event ID 6705: | |
<subject> | Text/String/Number | Event ID 6706: |