Rsyslog Process

Classification

Rule Name	Rule Type	Common Event	Classification
Rsyslog Process	Base Rule	Syslog Information	Information
Rsyslog Exiting	Sub Rule	Process/Service Stopped	Startup and Shutdown
Rsyslog Start	Sub Rule	General Logging Information	Information

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text\String
N/A	<process>	Text\String
N/A	<processid>	Number
N/A	<version>	Number
N/A	<url>	Text\String
N/A	<command>	Text\String
N/A	<tag1>	Text\String

×