Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
Event ID | <vmid> | Number | Event ID 3201, 3202, 3203, 3204, 3205, 3206, 3207, 3208, 3209, 3210, 3211, 3212, 3213, 3214, 3215, 3216, 3217, 3218, 3219, 3220, 3221, 3222, 3223, 3224, 3225, 3226, 3227, 3228, 3229, 3230, 3231, 3232, 3233, 3234, 3235, 3236, 3237, 3238, 3239, 3240 |
Severity | <severity> | Text/String | For All: Information For 3207, 3212, 3217, 3220, 3223, 3226, 3229, 3240: Error For 3202, 3213, 3239: Warning For 3214, 3215, 3216, 3218, 3219, 3221, 3222, 3225, 3227, 3228: Debug |
Message | <subject> <objecttype> <object> | Text/String | Event ID 3201: Indicates that the module has been physically inserted |
| <subject> <objecttype> <object> | Text/String | Event ID 3202: Indicates that the module has been physically removed |
| <subject> <objecttype> <object> | Text/String | Event ID 3203: Indicates that the module is about to reboot |
| <subject> <objecttype> <object> | Text/String | Event ID 3204: Indicates that the module is initialized and ready |
| <subject> <objecttype> <object> <reason> | Text/String | Event ID 3205: Indicates that the module is down |
| <subject> <objecttype> <object> | Text/String | Event ID 3206: Indicates that a module is in diagnostics mode |
| <subject> <objecttype> <object> <reason> | Text/String | Event ID 3207: Indicates that a module has failed |
| <subject> <objecttype> <object> | Text/String | Event ID 3208: Indicates that the module administrative state is set to up |
| <subject> <objecttype> <object> | Text/String | Event ID 3209: Indicates that the module administrative state is set to down |
| <subject> <objecttype> <object> | Text/String | Event ID 3210: Indicates that the module administrative state is set to diagnostics |
| <subject> <objecttype> <object> | Text/String | Event ID 3211: Indicates that ISP has passed for the module |
| <subject> <objecttype> <object> | Text/String | Event ID 3212: Indicates that ISP has failed for the module |
| <subject> <objecttype> <object> | Text/String | Event ID 3213: Indicates that ISP has been skipped for the module |
| <subject> <objecttype> <object> | Text/String | Event ID 3214: Indicates that the module is in standby (low-power) mode |
| <subject> <objecttype> <object> | Text/String | Event ID 3215: Indicates that the module is requesting to power on |
| <subject> <objecttype> <object> | Text/String | Event ID 3216: Indicates that the power request for the module has been granted |
| <subject> <objecttype> <object> | Text/String | Event ID 3217: Indicates that the power request for the module has been denied |
| <subject> <objecttype> <object> | Text/String | Event ID 3218: Indicates that main power for the module is being enabled |
| <subject> <objecttype> <object> | Text/String | Event ID 3219: Indicates that main power for the module has been enabled |
| <subject> <objecttype> <object> | Text/String | Event ID 3220: Indicates that main power for the module has failed |
| <subject> <objecttype> <object> | Text/String | Event ID 3221: Indicates that device initialization for the module has started |
| <subject> <objecttype> <object> | Text/String | Event ID 3222: Indicates that device initialization for the module has passed |
| <subject> <objecttype> <object> <reason> | Text/String | Event ID 3223: Indicates that device initialization for the module has failed |
| <subject> <objecttype> <object> | Text/String | Event ID 3224: Indicates that an ASIC for the module is being initialized |
| <subject> <objecttype> <object> | Text/String | Event ID 3225: Indicates that ASIC initialization for the module has completed |
| <subject> <objecttype> <object> <reason> | Text/String | Event ID 3226: Indicates that ASIC initialization for the module has failed |
| <subject> <objecttype> <object> | Text/String | Event ID 3227: Indicates that an ASIC for the module is being deinitialized |
| <subject> <objecttype> <object> | Text/String | Event ID 3228: Indicates that ASIC deinitialization for the module has completed |
| <subject> <objecttype> <object> <reason> | Text/String | Event ID 3229: Indicates that ASIC deinitialization for the module has failed |
| <subject> <object> | Text/String | Event ID 3230: Indicates that the module is about to start zeroization |
| <subject> <object> | Text/String | Event ID 3231: Indicates that the module zeroization has completed |
| <subject> <object> | Text/String | Event ID 3232: Indicates that the module zeroization failed to complete |
| <subject> <objecttype> <object> | Text/String | Event ID 3233: Indicates that the module has been configured |
| <subject> <objecttype> <object> | Text/String | Event ID 3234: Indicates that the module has been unconfigured |
| <subject> <objecttype> <object> | Text/String | Event ID 3235: Indicates that the module has started failover |
| <subject> <objecttype> <object> | Text/String | Event ID 3236: Indicates that the module has completed failover |
| <subject> <objecttype> <object> | Text/String | Event ID 3237: Indicates that ISP has started for the module |
| <subject> <objecttype> <object> | Text/String | Event ID 3238: Indicates that front-end power is being enabled |
| <subject> <objecttype> <object> <reason> | Text/String | Event ID 3239: Indicates that front-end power is being disabled |
| <subject> <objecttype> <object> | Text/String | Event ID 3240: Indicates that persistent hardware error has occurred |