ND Snooping Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

ND Snooping Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 8401, 8402, 8403, 8404, 8405

Severity

<severity>

Text/String

For All: Information

Message

<subject>

Text/String

Event ID 8401:
Log event when all dynamic binding entries are cleared.

<subject>
<dport>

Text/String/Number

Event ID 8402:
Log event when all dynamic binding entries on a port are cleared.

<subject>
<object>

Text/String

Event ID 8403:
Log event when all dynamic binding entries on a vlan are cleared.

<subject>
<object>
<dip>

Text/String/IP Address

Event ID 8404:
Log event when a specific dynamic binding entry on a vlan is cleared.

<subject>
<objecttype>
<dport>
<object>
<smac>
<status>
<bytesin>

Text/String/Number

Event ID 8405:
Log event when ND packet received on port.