PowerTech Events

Vendor Documentation

Rule Name	Rule Type	Common Event	Classification
PowerTech Events	Base Rule	General Security	Other Security
General Emergency	Sub Rule	General Emergency Log Message	Critical
General Alert	Sub Rule	General Alert	Warning
General Critical	Sub Rule	General Critical	Critical
General Error	Sub Rule	General Error	Error
General Warning	Sub Rule	General Warning	Warning
General Notice	Sub Rule	General Notice	Information
General Information	Sub Rule	General Information	Information
General Debug	Sub Rule	General Debug Message	Information

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	N/A	N/A	N/A
N/A	N/A	N/A	Device Vendor
N/A	<vendorinfo>	Text/String	Device Product
N/A	<version>	Text/String/Number	Device Version
N/A	<vmid>	Text/String	Device Event Class ID
N/A	<subject>	Text/String	Name
N/A	<severity> <tag1>	Number	Severity
src	<sname> or <sip>	Text/String/IP Address	N/A
dst	<dname> or <dip>	Text/String/IP Address	N/A
msg	<action> <objecttype> <object> <process> <login> <processid> <objectname>	Text/String	N/A