Breadcrumbs

MSDP Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

MSDP Events

Base Rule

General MSDP Message

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 8601, 8602, 8603, 8604, 8606, 8607, 8608, 8609

Severity

<severity>

Text/String

For All: Information
For 8609: Warning

Message

<subject>
<status>
<object>

Text/String

Event ID 8601:
Router msdp configuration status


<subject>
<status>
<dinterface>

Text/String

Event ID 8602:
MSDP Source Interface operational status


<subject>
<status>
<dip>
<dinterface>

Text/String/IP Address

Event ID 8603:
Logs the changes in MSDP Peer connection state.


<subject>
<status>
<dip>
<dport>

Text/String/Number/IP Address

Event ID 8604:
Log event when port is added or deleted for a peer.


<subject>
<status>
<dip>
<dinterface>
<object>

Text/String/IP Address

Event ID 8606:
Log event when peer is enabled or disabled


<subject>
<object>
<dip>

Text/String/IP Address

Event ID 8607:
Log event when client or server is elected


<subject>
<dip>

Text/String/IP Address

Event ID 8608:
Log event when TCP final packet is received.


<subject>
<dip>
<sip>

Text/String/IP Address

Event ID 8609:
Log event when MSDP SA cache limit is reached.