Skip to main content
Skip table of contents

Syslog - Aruba Switch

Device Details

Device Name

Aruba Switch

Vendor

HPE

Device Type

Aruba Switch

Supported Model Name/Number

N/A

Supported Software Version

N/A

Collection Method

Syslog

Configurable Log Output

N/A

Log Source Type

Syslog - Aruba Switch

Log Processing Policy

LogRhythm Default V 2.0

Exceptions

N/A

Additional Information

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Supported Log Messages

(List of LR tags used to parse the log information for each message type)

Type

Product Version

Supported Schema Fields

AAA Events

N/A

<vmid>, <severity>, <subject>, <dip>, <dport>, <object>, <status>, <objecttype>, <action>

ACLs Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <object>, <objectname>, <dinterface>, <action>

ARP Security Events

N/A

<vmid>, <severity>, <subject>, <status>, <object>, <dport>

ASIC Table Full Error For L3PD Events

N/A

<vmid>, <severity>, <subject>, <quantity>

BFD Events

N/A

<vmid>, <severity>, <subject>, <session>, <object>, <action>, <sport>, <dip>, <status>, <result>, <sname>, <objecttype>, <protname>, <milliseconds>, <dinterface>

BGP Events

N/A

<vmid>, <severity>, <subject>, <dip>, <dname>, <sname>, <sip>, <result>, <reason>, <object>, <amount>, <group>, <size>

Bluetooth Management Events

N/A

<vmid>, <severity>, <subject>, <action>, <dmac>

Catch All : Level 1

N/A

<severity>, <tag1>

CDP Events

N/A

<vmid>, <severity>, <subject>, <dmac>, <sinterface>, <quantity>

Certificate Management Events

N/A

<vmid>, <severity>, <subject>, <dname>, <object>, <amount>, <result>, <status>

Config Management Events

N/A

<vmid>, <severity>, <subject>, <sname>, <dname>, <result>, <status>, <objecttype>, <object>

Connectivity Fault Management (CFM) Events

N/A

<vmid>, <severity>, <subject>, <object>, <dinterface>

Container Manager Events

N/A

<vmid>, <severity>, <subject>, <object>

CoPP Events

N/A

<vmid>, <severity>, <subject>, <object>

CPU_RX Events

N/A

<vmid>, <severity>, <subject>, <action>, <amount>, <object>

Credential Manager Events

N/A

<vmid>, <severity>, <subject>, <account>, <object>

DHCP Relay Events

N/A

<vmid>, <severity>, <subject>

DHCP Server Events

N/A

<vmid>, <severity>, <subject>, <dmac>, <dip>, <dname>, <object>, <action>

DHCPv4 Snooping Events

N/A

<vmid>, <severity>, <subject>, <dip>, <dport>, <smac>, <dmac>, <sport>, <sip>, <object>, <size>

DHCPv6 Relay Events

N/A

<vmid>, <severity>, <subject>

DHCPv6 Snooping Events

N/A

<vmid>, <severity>, <subject>, <dip>, <dport>, <smac>, <sip>, <sport>, <object>, <size>

Dicovery And Capability Exchange (DCBx) Events

N/A

<vmid>, <severity>, <subject>, <dinterface>

DNS Client Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <object>

DPSE Events

N/A

<vmid>, <severity>, <subject>, <object>

ECMP Events

N/A

<vmid>, <severity>, <subject>, <object>, <result>

ERPS Events

N/A

<vmid>, <severity>, <subject>, <object>, <objecttype>, <status>, <dinterface>, <dport>, <reason>

EVPN Events

N/A

<vmid>, <severity>, <subject>, <object>, <objectname>, <dip>, <action>, <dmac>

External Storage Events

N/A

<vmid>, <severity>, <subject>, <object>, <status>

Fan Events

N/A

<vmid>, <severity>, <subject>, <quantity>, <object>, <amount>, <objecttype>, <action>, <size>, <reason>, <status>, <objectname>, <result>

Fault Monitor Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <result>, <dmac>, <account>, <amount>

Firmware Update Events

N/A

<vmid>, <severity>, <subject>, <account>, <object>, <objecttype>, <dname>, <result>

Hardware Health Monitor Events

N/A

<vmid>, <severity>, <subject>, <object>, <result>, <sname>, <location>, <action>, <status>, <sip>

Hardware Switch Controller Sync Events

N/A

<vmid>, <severity>, <subject>, <dport>, <dmac>, <object>, <dip>

HTTPS Server Events

N/A

<vmid>, <severity>, <subject>, <account>, <action>, <status>, <object>, <session>

In-System Programming Events

N/A

<vmid>, <severity>, <subject>, <object>, <objectname>, <action>, <version>

Interface Events

N/A

<vmid>, <severity>, <subject>, <status>, <dinterface>, <result>

Internal Storage Events

N/A

<vmid>, <severity>, <subject>, <object>, <amount>, <result>

IP Source Lockdown Events

N/A

<vmid>, <severity>, <subject>, <dinterface>

IP Tunnels Events

N/A

<vmid>, <severity>, <subject>, <objectname>, <objecttype>, <object>, <dip>, <sip>

IP-SLA Events

N/A

<vmid>, <severity>, <subject>, <session>, <status>, <reason>, <dinterface>, <action>

IPv6 Router Advertisement Events

N/A

<vmid>, <severity>, <subject>, <dip>, <dinterface>

IRDP Events

N/A

<vmid>, <severity>, <subject>, <dinterface>

L3 Encap Capacity Events

N/A

<vmid>, <severity>, <subject>

L3 Resource Manager Events

N/A

<vmid>, <severity>, <subject>

LACP Events

N/A

<vmid>, <severity>, <subject>, <object>, <action>, <rate>, <status>, <dinterface>

LAG Events

N/A

<vmid>, <severity>, <subject>, <size>, <object>, <result>, <reason>, <dport>, <dinterface>

LED Events

N/A

<vmid>, <severity>, <subject>, <amount>, <object>

Layer 3 Interface Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <status>, <object>, <result>, <dip>, <dport>

LLDP Events

N/A

<vmid>, <severity>, <subject>, <object>, <sinterface>, <sip>, <dinterface>

Loop Protect Events

N/A

<vmid>, <severity>, <subject>, <sport>, <dport>, <object>

Loopback Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <status>

MAC Address Mode Configuration Events

N/A

<vmid>, <severity>, <subject>, <dmac>, <object>

MAC Learning Events

N/A

<vmid>, <severity>, <subject>, <dmac>, <sinterface>, <dinterface>, <object>,

MACsec Events

N/A

<vmid>, <severity>, <subject>, <object>, <dinterface>

Management Events

N/A

<vmid>, <severity>, <subject>, <object>

MDNS Events

N/A

<vmid>, <severity>, <subject>

Mirroring Events

N/A

<vmid>, <severity>, <subject>, <session>

MGMD Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <object>, <sip>, <size>, <dinterface>, <dip>, <dport>, <status>

MSDP Events

N/A

<vmid>, <severity>, <subject>, <status>, <object>, <dinterface>, <dip>, <dport>, <sip>

Multiple Spanning Tree Protocol Events

N/A

<vmid>, <severity>, <subject>, <object>, <objectname>, <protname>, <smac>, <dmac>, <dport>, <objecttype>, <status>, <action>

Multicast Traffic Manager Events

N/A

<vmid>, <severity>, <subject>, <size>

MVRP Events

N/A

<vmid>, <severity>, <subject>, <dport>, <object>, <size>

Module Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <object>, <reason>

NAE Agents Events

N/A

<vmid>, <severity>, <subject>, <object>

NAE Events

N/A

<vmid>, <severity>, <subject>, <object>, <url>, <action>, <login>

NAE Scripts Events

N/A

<vmid>, <severity>, <subject>, <object>, <action>, <result>

ND Snooping Events

N/A

<vmid>, <severity>, <subject>, <dport>, <object>, <dip>, <objecttype>, <smac>, <status>, <bytesin>

NDM Events

N/A

<vmid>, <severity>, <subject>, <sip>, <sport>, <object>, <smac>, <dport>, <dip>, <dmac>

NTP Events

N/A

<vmid>, <severity>, <subject>, <action>, <dname>, <status>

OSPFv2 Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <status>, <action>, <object>, <reason>

OSPFv3 Events

N/A

<vmid>, <severity>, <subject>, <action>, <object>, <reason>, <dinterface>, <status>

Password Reset Events

N/A

<vmid>, <severity>, <subject>

PIM Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <dinterface>, <dip> <result>, <object>, <sip>, <status>, <sport>, <sname>, <group>, <version>, <reason>, <dport>, <action>, <size>

Policies Events

N/A

<vmid>, <severity>, <subject>, <policy>, <object>

Port Access Roles Events

N/A

<vmid>, <severity>, <subject>, <result>, <policy>

Port Events

N/A

<vmid>, <severity>, <subject>, <result>, <dinterface>, <status>, <policy>, <object>, <sip>

Port Security Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <dmac>, <dport>

Port Statistics Events

N/A

<vmid>, <severity>, <subject>, <object>

PORT_ACCESS Events

N/A

<vmid>, <severity>, <subject>, <dmac>, <dport>, <action>, <size>, <object>, <objectname>, <policy>

Power Events

N/A

<vmid>, <severity>, <subject>, <object>, <status>, <objecttype>, <quantity>

Power Over Ethernet Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <objecttype>, <object>

Proxy ARP Events

N/A

<vmid>, <severity>, <subject>, <dport>, <object>

Quality Of Service Events

N/A

<vmid>, <severity>, <subject>, <result>

QoS ASIC Provider Events

N/A

<vmid>, <severity>, <subject>, <result>, <reason>, <dport>

Rapid/VLAN Spanning Tree Protocol Events

N/A

<vmid>, <severity>, <subject>, <smac>, <dmac>, <object>, <sport>, <protname>, <objecttype>, <dport>, <dinterface>, <quantity>

RBAC Events

N/A

<vmid>, <severity>, <subject>, <status>

Redundant Management Events

N/A

<vmid>, <severity>, <subject>, <reason>, <object>

Replication Manager Events

N/A

<vmid>, <severity>, <subject>, <object>

REST Events

N/A

<vmid>, <severity>, <subject>, <account>, <session>, <url>, <objecttype>, <object>, <action>, <login>, <policy>, <objectname>, <command>, <result>, <sip>, <sname>

Self Test Events

N/A

<vmid>, <severity>, <subject>, <reason>, <object>

sFlow Events

N/A

<vmid>, <severity>, <subject>, <action>, <result>, <object>, <dport>, <dinterface>, <dip>, <amount>, <size>

SFTP Client Events

N/A

<vmid>, <severity>, <subject>, <status>

SNMP Events

N/A

<vmid>, <severity>, <subject>, <object>

SSH Server Events

N/A

<vmid>, <severity>, <subject>, <object>, <account>

SSH_CLIENT Events

N/A

<vmid>, <severity>, <subject>, <dip>, <object>, <account>, <dport>

Supportability Events

N/A

<vmid>, <severity>, <subject>, <process>, <object>, <result>, <reason>, <dname>, <objecttype>, <objectname>, <status>

SYS Events

N/A

<vmid>, <severity>, <subject>, <object>

SYSMON Events

N/A

<vmid>, <severity>, <subject>

TCAM Events

N/A

<vmid>, <severity>, <subject>, <object>

Temperature Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <object>, <objectname>, <status>

Time Management Events

N/A

<vmid>, <severity>, <subject>

Transceiver Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <object>, <status>, <reason>

UDLD Events

N/A

<vmid>, <severity>, <subject>, <dinterface>

UDP Broadcast Forwarder Events

N/A

<vmid>, <severity>, <subject>

User Management Events

N/A

<vmid>, <severity>, <subject>, <login>, <account>, <policy>

User-Based Tunnels Events

N/A

<vmid>, <severity>, <subject>, <sip>, <status>, <dip>, <dmac>, <dport>

Virtual Switching Extension (VSX) Events

N/A

<vmid>, <severity>, <subject>, <dport>, <reason>, <objecttype>, <object>, <objectname>, <status>, <dinterface>, <dip>

Virtual Switching Framework (VSF) Events

N/A

<vmid>, <severity>, <subject>, <object>, <objecttype>, <dmac>, <reason>, <status>, <smac>, <sport>, <dport>

VLAN Events

N/A

<vmid>, <severity>, <subject>, <object>, <dport>, <dmac>, <objecttype>

VLAN Interface Events

N/A

<vmid>, <severity>, <subject>, <dinterface>, <object>, <result>

VRF Events

N/A

<vmid>, <severity>, <subject>, <object>

VRF Manager Events

N/A

<vmid>, <severity>, <subject>, <object>

VRRP Events

N/A

<vmid>, <severity>, <subject>, <objecttype>, <object>, <dinterface>, <dip>, <version>, <status>

VSX Sync Events

N/A

<vmid>, <severity>, <subject>, <object>

VXLAN Events

N/A

<vmid>, <severity>, <subject>, <object>, <dport>, <status>, <dip>

Zero Touch Provisioning Events

N/A

<vmid>, <severity>, <subject>, <dip>, <object>

Revision History

KB Version

Log Type

Change Type

Details

KB 7.1.710.0

Syslog - Aruba Switch

New Device Documentation

N/A

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.