Redundant Management Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Redundant Management Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 2201, 2202, 2203, 2204, 2205, 2206, 2207, 2208, 2209

Severity

<severity>

Text/String

For All: Information

Message

<subject>
<reason>

Text/String

Event ID 2201:
This log event informs that failover event is detected

<subject>
<object>

Text/String

Event ID 2202:
This log event informs that standby mgmt module has been removed

<subject>

Text/String

Event ID 2203:
This log event informs that standby mgmt module has been removed

<subject>
<object>

Text/String

Event ID 2204:
This log event informs about the status of Active mgmt module

<subject>
<object>

Text/String

Event ID 2205:
This log event informs about the status of Standby mgmt module

<subject>
<object>

Text/String

Event ID 2206:
This log event informs that standby mgmt module is added to the system

<subject>

Text/String

Event ID 2207:
This log event informs the user that Active mgmt module has detected heartbeat loss

<subject>
<object>

Text/String

Event ID 2208:
This log event informs the user that filesync is in progress

<subject>
<object>

Text/String

Event ID 2209:
This log event informs the user that an ISSU operation has begun