Network Connection Messages

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

Network Connection Messages

Base Rule

Information

Network Information Message

Data Successfully Transferred

Sub Rule

Network Traffic

Transfer Complete

Request Tunneled Using CONNECT Method

Sub Rule

Network Traffic

Transfer Complete

Returned Object Not Cacheable

Sub Rule

Information

Cache Information

Requested Object Not In Cache

Sub Rule

Information

Content Not In Cache

Access To Object Denied By Filter

Sub Rule

Access Failure

Access Object Failure

Policy Denied A Method

Sub Rule

Information

General POLICY Information

Failure Occurred

Sub Rule

Warning

Tunnel Setup Failure

New Content Returned From Forced GIMS Request

Sub Rule

Information

Results Returned

Client Forced Revalidation With Origin Server

Sub Rule

Information

General Authentication Attempt

Valid Copy Of Object In Cache

Sub Rule

Information

Valid Content In Cache

TCP Accelerated

Sub Rule

Information

General Proxy Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Text/String/Number

N/A

<severity>

Text/String/Number

N/A

<sip>

Ip Address

N/A

<dip>

Ip Address

N/A

<dname>

Text/String

N/A

<sport>

Number

N/A

<protname>

Text/String

N/A

<useragent>

Text/String

N/A

<url>

Text/String

N/A

<group>

Text/String

N/A

<command>

Text/String

N/A

<duration>

Number