Phase 2 Exchange Message to Standby Unit

Classification

Rule Name

Rule Type

Common Event

Classification

Phase 2 Exchange Message To Standby Unit

Base Rule

IKE Initiator: Phase 2 Negotiation

Activity

Phase 2 Exchange Message

Sub Rule

IKE Initiator: Phase 2 Negotiation

Activity

Phase 2 Rekey Centry Message

Sub Rule

Multicast Rekey Sent

Information

Phase 2 Rcv Delete Message

Sub Rule

Rekey Received

Information

Phase 2 Start Rekeying Message

Sub Rule

IKE Initiator Rekeying Phase

Activity

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<process>

Text/String

N/A

<object>

Text/String

N/A

<tag1>

Text/String

N/A

<tag2>

Text/String