Phase 2 Exchange Message to Standby Unit

Classification

Rule Name	Rule Type	Common Event	Classification
Phase 2 Exchange Message To Standby Unit	Base Rule	IKE Initiator: Phase 2 Negotiation	Activity
Phase 2 Exchange Message	Sub Rule	IKE Initiator: Phase 2 Negotiation	Activity
Phase 2 Rekey Centry Message	Sub Rule	Multicast Rekey Sent	Information
Phase 2 Rcv Delete Message	Sub Rule	Rekey Received	Information
Phase 2 Start Rekeying Message	Sub Rule	IKE Initiator Rekeying Phase	Activity

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<vmid>	Number
N/A	<process>	Text/String
N/A	<object>	Text/String
N/A	<tag1>	Text/String
N/A	<tag2>	Text/String

×