SMTP Status Messages

Vendor Documentation

Rule Name	Rule Type	Common Event	Classification
SMTP Status Messages	Base Rule	SMTP MAIL Information	Information

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
logid	<vmid>	Number	The ID (logid) is a 10-digit field. It is a unique identifier for that specific log.
subtype	<protname>	Text/String	N/A
user	<login>	Text/String	N/A
session_id	<session>	Text/String	ID for the session.
msg	<subject>	Text/String	N/A
action	<command>	Text/String	N/A