Pattern 15 : CASE Updates

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0100110.html

Rule Name	Rule Type	Classification	Common Event
Pattern 15 : CASE Updates	Base Rule	Ops/Information	General Information
Starting Update	Sub Rule	Audit/Access Success	Command Executed
Update Not Needed	Sub Rule	Ops/Information	Update Not Needed
Nothing To Do	Sub Rule	Ops/Information	General Information
Status Update	Sub Rule	Ops/Information	Status Log
Update Finished	Sub Rule	Ops/Information	Update
Restarting Daemons	Sub Rule	Audit/Startup and Shutdown	Process/Service Restarted
Update Resumed	Sub Rule	Ops/Information	Update Resumed
Checking For Update	Sub Rule	Ops/Information	Checking For Update
Execute Process	Sub Rule	Audit/Access Success	Command Executed
Created Directory	Sub Rule	Audit/Access Success	Object Created
Post-Update Cleanup Started	Sub Rule	Ops/Information	Post-Update Cleanup Started
Post-Update Cleanup Completed	Sub Rule	Ops/Information	Post-Update Cleanup Completed
Execute Case Monitor	Sub Rule	Audit/Startup and Shutdown	Process/Service Started
Dequeue Status	Sub Rule	Ops/Information	General Information
Case Monitor Ping Result	Sub Rule	Ops/Network Traffic	Ping Response
Case Transfer Error	Sub Rule	Ops/Error	Case Transfer Error

Vendor Documentation