Vendor Documentation
Classification
|
Rule Name |
Rule Type |
Common Event |
Classification |
|---|---|---|---|
|
Module Events |
Base Rule |
General MODULE Message |
Information |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
Schema Description |
|
Event ID |
<vmid> |
Number |
Event ID 3201, 3202, 3203, 3204, 3205, 3206, 3207, 3208, 3209, 3210, 3211, 3212, 3213, 3214, 3215, 3216, 3217, 3218, 3219, 3220, 3221, 3222, 3223, 3224, 3225, 3226, 3227, 3228, 3229, 3230, 3231, 3232, 3233, 3234, 3235, 3236, 3237, 3238, 3239, 3240 |
|
Severity |
<severity> |
Text/String |
For All: Information
|
|
Message |
<subject>
|
Text/String |
Event ID 3201:
|
|
|
<subject>
|
Text/String |
Event ID 3202:
|
|
|
<subject>
|
Text/String |
Event ID 3203:
|
|
|
<subject>
|
Text/String |
Event ID 3204:
|
|
|
<subject>
|
Text/String |
Event ID 3205:
|
|
|
<subject>
|
Text/String |
Event ID 3206:
|
|
|
<subject>
|
Text/String |
Event ID 3207:
|
|
|
<subject>
|
Text/String |
Event ID 3208:
|
|
|
<subject>
|
Text/String |
Event ID 3209:
|
|
|
<subject>
|
Text/String |
Event ID 3210:
|
|
|
<subject>
|
Text/String |
Event ID 3211:
|
|
|
<subject>
|
Text/String |
Event ID 3212:
|
|
|
<subject>
|
Text/String |
Event ID 3213:
|
|
|
<subject>
|
Text/String |
Event ID 3214:
|
|
|
<subject>
|
Text/String |
Event ID 3215:
|
|
|
<subject>
|
Text/String |
Event ID 3216:
|
|
|
<subject>
|
Text/String |
Event ID 3217:
|
|
|
<subject>
|
Text/String |
Event ID 3218:
|
|
|
<subject>
|
Text/String |
Event ID 3219:
|
|
|
<subject>
|
Text/String |
Event ID 3220:
|
|
|
<subject>
|
Text/String |
Event ID 3221:
|
|
|
<subject>
|
Text/String |
Event ID 3222:
|
|
|
<subject>
|
Text/String |
Event ID 3223:
|
|
|
<subject>
|
Text/String |
Event ID 3224:
|
|
|
<subject>
|
Text/String |
Event ID 3225:
|
|
|
<subject>
|
Text/String |
Event ID 3226:
|
|
|
<subject>
|
Text/String |
Event ID 3227:
|
|
|
<subject>
|
Text/String |
Event ID 3228:
|
|
|
<subject>
|
Text/String |
Event ID 3229:
|
|
|
<subject>
|
Text/String |
Event ID 3230:
|
|
|
<subject>
|
Text/String |
Event ID 3231:
|
|
|
<subject>
|
Text/String |
Event ID 3232:
|
|
|
<subject>
|
Text/String |
Event ID 3233:
|
|
|
<subject>
|
Text/String |
Event ID 3234:
|
|
|
<subject>
|
Text/String |
Event ID 3235:
|
|
|
<subject>
|
Text/String |
Event ID 3236:
|
|
|
<subject>
|
Text/String |
Event ID 3237:
|
|
|
<subject>
|
Text/String |
Event ID 3238:
|
|
|
<subject>
|
Text/String |
Event ID 3239:
|
|
|
<subject>
|
Text/String |
Event ID 3240:
|