Device Details
|
Device Name |
Akamai Guardicore Centra CEF |
|
Vendor |
Akamai |
|
Device Type |
Akamai |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
N/A |
|
Log Source Type |
Syslog - Akamai Guardicore Centra CEF |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://docs.cyderes.cloud/parser-knowledge-base/guardicore_centra/#product-event-types |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
Agent Log Event Messages |
N/A |
<version>, <vmid>, <vendorinfo>, <severity>, <session>, <sname>, <object>, <subject>, <status>, <tag1> |
|
Audit Record Messages |
N/A |
<version>, <vmid>, <vendorinfo>, <severity>, <command>, <action>, <tag1>, <login>, <domainorigin>, <subject>, <sip> |
|
Catch All |
N/A |
<severity>, <tag1> |
|
Network Log Messages |
N/A |
<version>, <vmid>, <vendorinfo>, <severity>, <session>, <action>, <sip>, <sname>, <domainorigin>, <login>, <dip>, <dport>, <dname>, <protname>, <status>, <tag1>, <process>, <result>, <policy>, <group>, <parentprocesspath>, <objectname>,
|
|
Policy Violation Messages |
N/A |
<version>, <vmid>, <vendorinfo>, <severity>, <dip>, <dname>, <action>, <object>, <url>, <policy>, <threatid> |
|
System Event Messages |
N/A |
<version>, <vmid>, <vendorinfo>, <severity>, <session>, <sip>, <sname>, <subject> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.729.0 |
Syslog - Akamai Guardicore Centra CEF |
New Device Documentation |
N/A |