Rapid/VLAN Spanning Tree Protocol Events
Vendor Documentation
https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf |
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
Rapid/VLAN Spanning Tree Protocol Events | Base Rule | Spanning Tree Info Msg | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
Event ID | <vmid> | Number | Event ID 5001, 5002, 5003, 5004, 5005, 5006, 5007, 5008, 5009, 5010, 5011, 5012, 5013 |
Severity | <severity> | Text/String | For All: Information |
Message | <subject> | Text/String | Event ID 5001: |
| <subject> | Text/String | Event ID 5002: |
| <subject> | Text/String | Event ID 5003: |
| <subject> | Text/String/Number | Event ID 5004 (Severity: Warning): |
| <subject> | Text/String/Number | Event ID 5005: |
| <subject> | Text/String/Number | Event ID 5006: |
| <subject> | Text/String/Number | Event ID 5007: |
| <subject> | Text/String/Number | Event ID 5008 (Severity: Warning): |
| <subject> | Text/String/Number | Event ID 5009 (Severity: Warning): |
| <subject> | Text/String/Number | Event ID 5010: |
| <subject> | Text/String/Number | Event ID 5011: |
| <subject> | Text/String | Event ID 5012: |
| <subject> | Text/String/Number | Event ID 5013: |