Pattern 2 : Sendmail Notification

Classification

Rule Name

Rule Type

Classification

Common Event

Pattern 2 : Sendmail Notification

Base Rule

Information

General Sendmail Notice

Sendmail: Sender Notify: Delivery Delayed

Sub Rule

Warning

Sender Notify: Delivery Delayed

Sendmail: Sender Notify: User Unknown

Sub Rule

Warning

Sender Notify: User Unknown

Sendmail: Sender Notify: Local Configuration Error

Sub Rule

Error

Sender Notify: Local Configuration Error

Sendmail: Sender Notify: Internal Error

Sub Rule

Error

Sender Notify: Internal Error

Sendmail: Sender Notify: Host Unknown

Sub Rule

Warning

Sender Notify: Host Unknown

Sendmail: Sender Notify: Data Format Error

Sub Rule

Error

Sender Notify: Data Format Error

Sendmail: Sender Notify: Delivery Delayed

Sub Rule

Warning

Sender Notify: Delivery Delayed

Sendmail: Sender Notify: Service Unavailable

Sub Rule

Warning

Sender Notify: Service Unavailable

Sendmail: Return To Sender: Delivery Delayed

Sub Rule

Warning

return to sender: Delivery Delayed

Sendmail: Return To Sender: User Unknown

Sub Rule

Warning

Return To Sender: User Unknown

Sendmail: Return To Sender: Local Config Error

Sub Rule

Error

Return To Sender: Local Configuration Error

Sendmail: Return To Sender: Internal Error

Sub Rule

Error

Return To Sender: Internal Error

Sendmail: Return To Sender: Host Unknown

Sub Rule

Warning

Return To Sender: Host Unknown

Sendmail: Return To Sender: Data Format Error

Sub Rule

Error

Return To Sender: Data Format Error

Sendmail: Return To Sender: Delivery Delayed

Sub Rule

Warning

return to sender: Delivery Delayed

Sendmail: Return To Sender: Service Unavailable

Sub Rule

Warning

Return To Sender: Service Unavailable

Sendmail: Postmaster Notify: Delivery Delayed

Sub Rule

Warning

Postmaster Notify: Delivery Delayed

Sendmail: Postmaster Notify: User Unknown

Sub Rule

Warning

Postmaster Notify: User Unknown

Sendmail: Postmaster Notify: Local Config Error

Sub Rule

Error

Postmaster Notify: Local Configuration Error

Sendmail: Postmaster Notify: Internal Error

Sub Rule

Error

Postmaster Notify: Internal Error

Sendmail: Postmaster Notify: Host Unknown

Sub Rule

Warning

Postmaster Notify: Host Unknown

Sendmail: Postmaster Notify: Data Format Error

Sub Rule

Error

Postmaster Notify: Data Format Error

Sendmail: Postmaster Notify: Delivery Delayed

Sub Rule

Warning

Postmaster Notify: Delivery Delayed

Sendmail: Postmaster Notify: Service Unavailable

Sub Rule

Warning

Postmaster Notify: Service Unavailable

Sendmail: DSN: Delivery Delayed

Sub Rule

Warning

DSN: Delivery Delayed

Sendmail: DSN: User Unknown

Sub Rule

Warning

DSN: User unknown

Sendmail: DSN: Local Configuration Error

Sub Rule

Error

DSN: Local configuration error

Sendmail: DSN: Internal Error

Sub Rule

Error

DSN: Internal error

Sendmail: DSN: Host Unknown

Sub Rule

Warning

DSN: Host unknown

Sendmail: DSN: Data Format Error

Sub Rule

Error

DSN: Data Format Error

Sendmail: DSN: Delivery Delayed

Sub Rule

Warning

DSN: Delivery Delayed

Sendmail: DSN: Service Unavailable

Sub Rule

Warning

DSN: Service unavailable

Sendmail : DSN : Too Many Hops

Sub Rule

Warning

DSN : Too Many Hops

Sendmail: Cannot Create Transcript File

Sub Rule

Access Failure

Create Object Failure

Sendmail: Cannot Save Rejected Email

Sub Rule

Access Failure

Add Object Failure

Sendmail: Savemail Panic Event

Sub Rule

Warning

Sendmail Savemail Panic Event

Sendmail: Unqualified Host Name

Sub Rule

Warning

Unknown Hostname

Sendmail: Unable To Qualify Domain Name

Sub Rule

Warning

Unable To Qualify Domain Name

Sendmail: Unsafe Map File

Sub Rule

Warning

Unsafe Map File

Forward Error: Group Writable Directory

Sub Rule

Error

General Sendmail Error

Gethostbyaddr Failed

Sub Rule

Error

General Sendmail Error

Sendmail: Sender Notify: Delivery Delayed

Sub Rule

Warning

Sender Notify: Delivery Delayed

Sendmail: Premature EOM : Unexpected Close

Sub Rule

Information

End Of Message Recieved

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

<MAIL:INFO>

<process>

Text/String

Sendmail

N/A

Number

N/A

<object>

Text/String

N/A

<vmid>

Text/String

N/A

<tag3>

Text/String

Hours

<hours>

Number