PowerTech Events

PowerTech

Rule Name

Rule Type

Common Event

Classification

PowerTech Events

Base Rule

General Security

Other Security

General Emergency

Sub Rule

General Emergency Log Message

Critical

General Alert

Sub Rule

General Alert

Warning

General Critical

Sub Rule

General Critical

Critical

General Error

Sub Rule

General Error

Error

General Warning

Sub Rule

General Warning

Warning

General Notice

Sub Rule

General Notice

Information

General Information

Sub Rule

General Information

Information

General Debug

Sub Rule

General Debug Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

N/A

N/A

N/A

N/A

N/A

N/A

Device Vendor

N/A

<vendorinfo>

Text/String

Device Product

N/A

<version>

Text/String/Number

Device Version

N/A

<vmid>

Text/String

Device Event Class ID

N/A

<subject>

Text/String

Name

N/A

<severity>
<tag1>

Number

Severity

src

<sname> or <sip>

Text/String/IP Address

N/A

dst

<dname> or <dip>

Text/String/IP Address

N/A

msg

<action>
<objecttype>
<object>
<process>
<login>
<processid>
<objectname>

Text/String

N/A