Session Information (VMWare ESX/ESXi Server)

Classification

Rule Name	Rule Type	Common Event	Classification
Session Information	Base Rule	Session Information	Information
Session Opened	Sub Rule	Session Opened	Information
Session Closed	Sub Rule	Session Closed	Information
Session Assigned To Computer	Sub Rule	Session Assigned	Information

Mapping with LogRhythm Schema

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text/String
N/A	<process>	Text/String
N/A	<tag3>	Text/String
N/A	<tag2>	Text/String
N/A	<sname>	Text/String
session	<session>	Text/String

×