Rsyslog Process

Classification

Rule Name

Rule Type

Common Event

Classification

Rsyslog Process

Base Rule

Syslog Information

Information

Rsyslog Exiting

Sub Rule

Process/Service Stopped

Startup and Shutdown

Rsyslog Start

Sub Rule

General Logging Information

Information

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text\String

N/A

<process>

Text\String

N/A

<processid>

Number

N/A

<version>

Number

N/A

<url>

Text\String

N/A

<command>

Text\String

N/A

<tag1>

Text\String