Proxy ARP Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Proxy ARP Events

Base Rule

General ARP Information

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 4205, 4206, 4207, 4208

Severity

<severity>

Text/String

For 4205, 4206: Information
For 4207, 4208: Error

Message

<subject>
<dport>
<object>

Text/String/Number

Event ID 4205:
Logs a message when the feature is enabled for a port inside a VRF

<subject>
<dport>
<object>

Text/String/Number

Event ID 4206:
Logs a message when the feature is disabled for a port inside a VRF

<subject>
<dport>
<object>

Text/String/Number

Event ID 4207:
Logs a message when the feature enable fails for a port inside a VRF

<subject>
<dport>
<object>

Text/String/Number

Event ID 4208:
Logs a message when the feature disable fails for a port inside a VRF