ProxyServices Messages

Classification

Rule Name	Rule Type	Common Event	Classification
ProxyServices Messages	Base Rule	General Information	Information
Password Update Failed	Sub Rule	Modify Object Attribute Failure	Access Failure
Attempt To Issue Blacklisted Command	Sub Rule	Command Execution Failure	Access Failure
Bad Request	Sub Rule	Bad Request	Warning
Connection Closed During SSL Handshake	Sub Rule	Connection Closed	Network Traffic

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text\String
N/A	<sip>	IP Address
N/A	<dip>	IP Address
N/A	<dport>	Number
N/A	<protname>	Text\String
N/A	<login>	Text\String
N/A	<process>	Text\String
N/A	<processid>	Number
N/A	<subject>	Text\String
N/A	<object>	Text\String
N/A	<version>	Text\String
N/A	<url>	Text\String
N/A	<command>	Text\String
N/A	<result>	Text\String
N/A	<tag1>	Text\String

×