Pattern 5 : Hostd Messages

Classification

Rule Name

Rule Type

Common Event

Classification

Pattern 5 : Hostd Messages

Base Rule

General Information

Information

Hostd : Reboot

Sub Rule

System Restarted

Startup and Shutdown

Hostd : Mount State Values Have Changed

Sub Rule

Object Modified

Access Success

Hostd : This Product Has Expired

Sub Rule

License Expired

Critical

Hostd : Result

Sub Rule

Results Returned

Information

Hostd : Established A Connection

Sub Rule

Connection Established

Network Traffic

Hostd : Suspended

Sub Rule

System Suspended

Error

Hostd : Client Closed Connection

Sub Rule

Client Connection Closed

Other Audit Success

Hostd : Deprecated Pam_Stack Module Called

Sub Rule

Deprecated Pam_Stack Module Called

Warning

Hostd : Disconnect Check In Progress

Sub Rule

Disconnect Check In Progress

Information

Hostd : Environmentbrowser

Sub Rule

General Environmentbrowser Information

Information

Hostd : Timedasyncread Failed: Operation Timed Out

Sub Rule

Failed Operation

Warning

Hostd : Failed To Validate Vm Ip Address

Sub Rule

Failed Operation

Warning

Hostd : Fail To Snd Rsp To The Client: Broken Pipe

Sub Rule

Failed Operation

Warning

Hostd : Failed To Power On

Sub Rule

Failed Operation

Warning

Hostd : Failed To Find Activation Record

Sub Rule

Failed Operation

Warning

Hostd : Failed To Do Power Op

Sub Rule

Failed Operation

Warning

Hostd : Failed Operation

Sub Rule

Failed Operation

Warning

Hostd : Invoke Done

Sub Rule

Invoke Done

Information

Hostd : Mount Vm Completion For Vm

Sub Rule

Mount Vm Complete

Information

Hostd : Mount Vm Complete

Sub Rule

Mount Vm Complete

Information

Hostd : Mounting Virtual Machine Paths On Conn

Sub Rule

Mounting Virtual Machine Paths On Connection

Information

Hostd : Received A Dup Transition From Foundry

Sub Rule

Received A Duplicate Transition From Foundry

Information

Hostd : Remote End Sent Pid

Sub Rule

Remote End Sent Pid

Information

Hostd : Resumed

Sub Rule

System Resumed

Other Audit Success

Hostd : Socket

Sub Rule

General Socket Information

Information

Hostd : Ssl Handshake On Client Connection Failed

Sub Rule

Ssl Handshake On Client Connection Failure

Warning

Hostd : To Poweron With Option Soft

Sub Rule

Poweron With Option Soft

Information

Hostd : Unmounting Vm Complete

Sub Rule

Unmounting Virtual Machine

Information

Hostd : Unmounting The Vm:

Sub Rule

Unmounting Virtual Machine

Information

Hostd : User Logged Event: Remote Console On

Sub Rule

Console Connection

Other Audit Success

Hostd : User Logged Event

Sub Rule

General User Logged Event

Information

Hostd : Vmdb_Setcurrentpath Failed

Sub Rule

Set Current Path Failed

Warning

Hostd : Vmkernel_Forkexec

Sub Rule

Command Executed

Access Success

Hostd : Vmhs: Exec

Sub Rule

Command Executed

Access Success

Hostd : Vmodl.Fault.Requestcanceled

Sub Rule

Command Canceled

Other Audit Success

Hostd : Vmx Status Has Been Set For Vm

Sub Rule

Status For Virtual Machine Set

Information

Hostd : Open Successful

Sub Rule

Object Accessed

Access Success

Hostd : Reloading Config State

Sub Rule

Configuration Loaded : System

Configuration

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

tag1

<tag1>

Text/String