Vendor Documentation
|
N/A |
Classification
|
Rule Name |
Rule Type |
Common Event |
Classification |
|---|---|---|---|
|
Rubrik Log Messages |
Base Rule |
General Information |
Information |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
Schema Description |
|
N/A |
N/A |
N/A |
N/A |
|
N/A |
N/A |
N/A |
N/A |
|
N/A |
N/A |
N/A |
N/A |
|
N/A |
N/A |
N/A |
N/A |
|
N/A |
<action> |
Text/String |
N/A |
|
N/A |
N/A |
N/A |
N/A |
|
N/A |
N/A |
N/A |
N/A |
|
clusterName |
<group> |
Text/String |
N/A |
|
eventId |
N/A |
N/A |
N/A |
|
eventName |
<command> |
Text/String |
N/A |
|
eventSeriesId |
N/A |
N/A |
N/A |
|
eventSeverity |
<severity> |
Text/String |
N/A |
|
eventType |
<sessiontype> |
Text/String |
N/A |
|
locationName |
N/A |
N/A |
N/A |
|
nodeId |
N/A |
N/A |
N/A |
|
nodeIpAddress |
<sip> |
Ip Address |
N/A |
|
objectId |
N/A |
N/A |
N/A |
|
objectName |
<objectname> |
Text/String |
N/A |
|
objectType |
<objecttype> |
Text/String |
N/A |
|
status |
<status> |
Text/String |
N/A |
|
N/A |
<sender> |
Text/String |
N/A |
|
instanceId |
<vmid> |
Numbers |
N/A |
|
jobId |
<responsecode> |
Text/String |
N/A |
|
jobType |
<reason> |
Text/String |
N/A |
|
ndc |
<result> |
Text/String |
N/A |
|
parentSpanId |
N/A |
N/A |
N/A |
|
profile |
N/A |
N/A |
N/A |
|
spanId |
N/A |
N/A |
N/A |
|
taskId |
<session> |
Text/String |
N/A |
|
tracerId |
N/A |
N/A |
N/A |
|
N/A |
<subject> |
Text/String |
N/A |