Classification
|
Rule Name |
Rule Type |
common event |
classification |
|---|---|---|---|
|
Pattern 6 : SMTP Connection Messages |
Base Rule |
General Information |
Information |
|
Connection Established |
Sub Rule |
Connection Established |
Network Traffic |
|
Disconnected |
Sub Rule |
Connection Closed |
Network Traffic |
|
TLS Session Starting |
Sub Rule |
Connection Built |
Network Traffic |
|
TLS Session Started |
Sub Rule |
Connection Established |
Network Traffic |
|
Connection Lost |
Sub Rule |
Connection Failed |
Network Traffic |
|
Connection Lost During Data Transfer |
Sub Rule |
Connection Failed During Data Transfer |
Warning |
|
Connection Lost After Recipient Declared |
Sub Rule |
Connection Lost After Recipient Declared |
Warning |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
|---|---|---|
|
N/A |
<severity> |
String/Text |
|
N/A |
<process> |
String |
|
N/A |
<processid> |
Number |
|
N/A |
<tag1> |
String/Text |
|
N/A |
<sname> |
String/Text |
|
N/A |
<sip> |
Number |