Sending/Received Keepalive

Classification

Rule Name	Rule Type	Common Event	Classification
Sending/Received Keepalive	Base Rule	Keepalive Information	Information
ASA-7-715036 : Sending Keepalive	Sub Rule	Keepalive Information	Information
ASA-7-715075 : Received Keepalive	Sub Rule	Keepalive Information	Information

Mapping with LogRhythm Schema 

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<vmid>	Number
group	<group>	Number
username	<login>	Text/String
IP	<sip>	Number
N/A	<tag1>	Text/String
keep alive of type	<object>	Text/String
seq number	<session>	Text/String

×