RBAC Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

RBAC Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 10301, 10302

Severity

<severity>

Text/String

For 10301: Information
For 10302: Error

Message

<subject>
<status>

Text/String

Event ID 10301:
Log event when local tac_plus server has been started

<subject>
<status>

Text/String

Event ID 10302:
Log event when local tac_plus server failed to start