Pattern 1 : Sendmail Mail To Messages
Classification
Rule Name | Rule Type | Classification | Common Event |
---|---|---|---|
Pattern 1 : Sendmail Mail To Messages | Base Rule | Information | General Sendmail Information |
Sendmail: Email Delivery Message Sent | Sub Rule | Information | Email Delivery Message Sent |
Sendmail: Email Delivery Remote Protocol Error | Sub Rule | Error | Email Delivery Remote Protocol Error |
Sendmail: Email Delivery Message Queued | Sub Rule | Information | Email Delivery Message Queued |
Sendmail: Email Delivery I/O Error | Sub Rule | Error | Email Delivery I/O Error |
Sendmail: Email Delivery Message Deferred | Sub Rule | Information | Email Delivery Message Deferred |
Sendmail: Email Delivery User Unknown | Sub Rule | Warning | Email Delivery User Unknown |
Sendmail: Email Delivery Local Configuration Error | Sub Rule | Error | Email Delivery Local Configuration Error |
Sendmail: Email Delivery Internal Error | Sub Rule | Error | Email Delivery Internal Error |
Sendmail: Email Delivery Host Unknown | Sub Rule | Warning | Email Delivery Host Unknown |
Sendmail: Email Delivery Data Format Error | Sub Rule | Error | Email Delivery Data Format Error |
Sendmail: Email Delivery Service Unavailable | Sub Rule | Warning | Email Delivery Service Unavailable |
Sendmail: Headers Too Large | Sub Rule | Warning | Header Length Exceeds The Configured Threshold |
Sendmail: Transient Parse Error | Sub Rule | Error | Parse Error |
Sendmail: Cannot Send Message For 5 Days | Sub Rule | Information | Message Delivery Delayed |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type |
---|---|---|
stat | <vmid> | Text\String |
Connection refused by | <dip> | IP Address |
N/A | <object> | Text\String |
to | <recipient> | Text\String |
ctladdr | N/A | N/A |
delay | <duration> | Time |
xdelay | N/A | N/A |
mailer | N/A | N/A |
pri | N/A | N/A |
N/A | <quantity> | Number |
N/A | <tag1> | Text\String |