PortMappingConfig Messages

Classification

Rule Name	Rule Type	Common Event	Classification
PortMappingConfig Messages	Base Rule	General Information	Information
Port Mapping Group Created	Sub Rule	Group Created	Account Created
Port Mapping Group Deleted	Sub Rule	Group Deleted	Account Deleted
Port Mapping Group Disabled	Sub Rule	Policy Disabled : Network	Policy
Port Mapping Group Enabled	Sub Rule	Policy Enabled : Network	Policy
Port Mapping Group Modified	Sub Rule	Policy Modified : Network	Policy
Port Mapping Group Renamed	Sub Rule	Object Renamed	Access Success

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<vmid>	Text\String
N/A	<sip>	IP Address
N/A	<group>	Text\String
N/A	<login>	Text\String
N/A	<subject>	Text\String
N/A	<object>	Text\String
N/A	<tag1>	Text\String

×