New Session from Client

Classification

Rule Name

Rule Type

Common Event

Classification

New Session from Client

Base Rule

Session Started

Warning

Mapping with LR Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<session>

Text/String

N/A

<process>

Text/String

N/A

<object>

Text/String

N/A

<sip>

Number