Syslog - Akamai Guardicore Centra CEF
Device Details
Device Name | Akamai Guardicore Centra CEF |
Vendor | Akamai |
Device Type | Akamai |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | N/A |
Log Source Type | Syslog - Akamai Guardicore Centra CEF |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information | https://docs.cyderes.cloud/parser-knowledge-base/guardicore_centra/#product-event-types |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
|---|---|---|
Agent Log Event Messages | N/A | <version>, <vmid>, <vendorinfo>, <severity>, <session>, <sname>, <object>, <subject>, <status>, <tag1> |
Audit Record Messages | N/A | <version>, <vmid>, <vendorinfo>, <severity>, <command>, <action>, <tag1>, <login>, <domainorigin>, <subject>, <sip> |
Catch All | N/A | <severity>, <tag1> |
Network Log Messages | N/A | <version>, <vmid>, <vendorinfo>, <severity>, <session>, <action>, <sip>, <sname>, <domainorigin>, <login>, <dip>, <dport>, <dname>, <protname>, <status>, <tag1>, <process>, <result>, <policy>, <group>, <parentprocesspath>, <objectname>, |
Policy Violation Messages | N/A | <version>, <vmid>, <vendorinfo>, <severity>, <dip>, <dname>, <action>, <object>, <url>, <policy>, <threatid> |
System Event Messages | N/A | <version>, <vmid>, <vendorinfo>, <severity>, <session>, <sip>, <sname>, <subject> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.729.0 | Syslog - Akamai Guardicore Centra CEF | New Device Documentation | N/A |