Skip to main content
Skip table of contents

Pattern 11 : HTTP Syslog

Vendor Documentation

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

Classification

Rule NameRule TypeClassificationCommon Event
Pattern 11 : HTTP Syslog
Base RuleOps/InformationGeneral HTTP Information
HTTP URL AccessedSub RuleAudit/Access SuccessObject Accessed
HTTP Session ExpiredSub RuleOps/InformationSession Expired
HTTP User LoginSub RuleAudit/Authentication SuccessUser Logon
HTTP VOF History UnavailableSub RuleOps/WarningVOF History Unavailable
HTTP Virus Threat Level UnavailableSub RuleOps/WarningVirus Threat Level Unavailable
HTTP SSL Handshake FailureSub RuleOps/ErrorSSL Handshake Failure
HTTPS Connection ErrorSub RuleOps/ErrorConnection Error
HTTP Page Not FoundSub RuleOps/ErrorHTTP 404 : Request Error - Not Found

Mapping with LogRhythm Schema

Device Key in Log MessageLogRhythm SchemaData TypeSchema Description

<dip>IP Address

<sip>IP Address

<sport>

Number

<dport>

Number

<login>Text\String

<session>Text\String

<object>Text\String

<url>Text\String

<tag1>Text\String

<tag2>Text\String


JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.

Contact Support Close