SSL Alert Messages

SSL Alert Messages

Base Rule

General Alert Message

Information

Illegal Parameters

Sub Rule

Illegal Characters

Error

Unknown Certificate

Sub Rule

Certificate Verification Failure

Error

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

logid

<vmid>

Number

The ID (logid) is a 10-digit field. It is a unique identifier for that specific log.

level

<severity>

Text\String

Each log entry contains a Level (level) field that indicates the estimated severity of the event that caused the log entry.

srcip

<sip>

IP Address

IP address of the traffic’s origin

dstip

<dip>

IP Address

Destination IP address for the web.

srcport

<sport>

Number

Port number of the traffic's origin

dstport

<dport>

Number

Port number of the traffic's destination.

sessionid

<session>

Text\String

ID for the session.

subtype

<process>

Text\String

N/A

desc

<object>

Text\String

N/A

msg

<subject>

Text\String

N/A

action

<command>

Text\String

N/A