Device Details
|
Device Name |
Aruba Switch |
|
Vendor |
HPE |
|
Device Type |
Aruba Switch |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
N/A |
|
Log Source Type |
Syslog - Aruba Switch |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf https://arubanetworking.hpe.com/techdocs/AOS-CX/10.16/PDF/elmrg.pdf |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
AAA Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <dport>, <object>, <status>, <objecttype>, <action> |
|
ACLs Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <object>, <objectname>, <dinterface>, <action> |
|
ARP Security Events |
N/A |
<vmid>, <severity>, <subject>, <status>, <object>, <dport> |
|
ASIC Table Full Error For L3PD Events |
N/A |
<vmid>, <severity>, <subject>, <quantity> |
|
BFD Events |
N/A |
<vmid>, <severity>, <subject>, <session>, <object>, <action>, <sport>, <dip>, <status>, <result>, <sname>, <objecttype>, <protname>, <milliseconds>, <dinterface> |
|
BGP Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <dname>, <sname>, <sip>, <result>, <reason>, <object>, <amount>, <group>, <size> |
|
Bluetooth Management Events |
N/A |
<vmid>, <severity>, <subject>, <action>, <dmac> |
|
Catch All : Level 1 |
N/A |
<severity>, <tag1> |
|
CDP Events |
N/A |
<vmid>, <severity>, <subject>, <dmac>, <sinterface>, <quantity> |
|
Certificate Management Events |
N/A |
<vmid>, <severity>, <subject>, <dname>, <object>, <amount>, <result>, <status> |
|
Config Management Events |
N/A |
<vmid>, <severity>, <subject>, <sname>, <dname>, <result>, <status>, <objecttype>, <object> |
|
Connectivity Fault Management (CFM) Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <dinterface> |
|
Container Manager Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
CoPP Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
CPU_RX Events |
N/A |
<vmid>, <severity>, <subject>, <action>, <amount>, <object> |
|
Credential Manager Events |
N/A |
<vmid>, <severity>, <subject>, <account>, <object> |
|
DHCP Relay Events |
N/A |
<vmid>, <severity>, <subject> |
|
DHCP Server Events |
N/A |
<vmid>, <severity>, <subject>, <dmac>, <dip>, <dname>, <object>, <action> |
|
DHCPv4 Snooping Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <dport>, <smac>, <dmac>, <sport>, <sip>, <object>, <size> |
|
DHCPv6 Relay Events |
N/A |
<vmid>, <severity>, <subject> |
|
DHCPv6 Snooping Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <dport>, <smac>, <sip>, <sport>, <object>, <size> |
|
Dicovery And Capability Exchange (DCBx) Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface> |
|
DNS Client Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <object> |
|
DPSE Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
ECMP Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <result> |
|
ERPS Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <objecttype>, <status>, <dinterface>, <dport>, <reason> |
|
EVPN Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <objectname>, <dip>, <action>, <dmac> |
|
External Storage Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <status> |
|
Fan Events |
N/A |
<vmid>, <severity>, <subject>, <quantity>, <object>, <amount>, <objecttype>, <action>, <size>, <reason>, <status>, <objectname>, <result> |
|
Fault Monitor Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <result>, <dmac>, <account>, <amount> |
|
Firmware Update Events |
N/A |
<vmid>, <severity>, <subject>, <account>, <object>, <objecttype>, <dname>, <result> |
|
Hardware Health Monitor Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <result>, <sname>, <location>, <action>, <status>, <sip> |
|
Hardware Switch Controller Sync Events |
N/A |
<vmid>, <severity>, <subject>, <dport>, <dmac>, <object>, <dip> |
|
HTTPS Server Events |
N/A |
<vmid>, <severity>, <subject>, <account>, <action>, <status>, <object>, <session> |
|
In-System Programming Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <objectname>, <action>, <version> |
|
Interface Events |
N/A |
<vmid>, <severity>, <subject>, <status>, <dinterface>, <result> |
|
Internal Storage Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <amount>, <result> |
|
IP Source Lockdown Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface> |
|
IP Tunnels Events |
N/A |
<vmid>, <severity>, <subject>, <objectname>, <objecttype>, <object>, <dip>, <sip> |
|
IP-SLA Events |
N/A |
<vmid>, <severity>, <subject>, <session>, <status>, <reason>, <dinterface>, <action> |
|
IPv6 Router Advertisement Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <dinterface> |
|
IRDP Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface> |
|
L3 Encap Capacity Events |
N/A |
<vmid>, <severity>, <subject> |
|
L3 Resource Manager Events |
N/A |
<vmid>, <severity>, <subject> |
|
LACP Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <action>, <rate>, <status>, <dinterface> |
|
LAG Events |
N/A |
<vmid>, <severity>, <subject>, <size>, <object>, <result>, <reason>, <dport>, <dinterface> |
|
LED Events |
N/A |
<vmid>, <severity>, <subject>, <amount>, <object> |
|
Layer 3 Interface Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <status>, <object>, <result>, <dip>, <dport> |
|
LLDP Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <sinterface>, <sip>, <dinterface> |
|
Loop Protect Events |
N/A |
<vmid>, <severity>, <subject>, <sport>, <dport>, <object> |
|
Loopback Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <status> |
|
MAC Address Mode Configuration Events |
N/A |
<vmid>, <severity>, <subject>, <dmac>, <object> |
|
MAC Learning Events |
N/A |
<vmid>, <severity>, <subject>, <dmac>, <sinterface>, <dinterface>, <object>, |
|
MACsec Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <dinterface> |
|
Management Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
MDNS Events |
N/A |
<vmid>, <severity>, <subject> |
|
Mirroring Events |
N/A |
<vmid>, <severity>, <subject>, <session> |
|
MGMD Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <object>, <sip>, <size>, <dinterface>, <dip>, <dport>, <status> |
|
MSDP Events |
N/A |
<vmid>, <severity>, <subject>, <status>, <object>, <dinterface>, <dip>, <dport>, <sip> |
|
Multiple Spanning Tree Protocol Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <objectname>, <protname>, <smac>, <dmac>, <dport>, <objecttype>, <status>, <action> |
|
Multicast Traffic Manager Events |
N/A |
<vmid>, <severity>, <subject>, <size> |
|
MVRP Events |
N/A |
<vmid>, <severity>, <subject>, <dport>, <object>, <size> |
|
Module Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <object>, <reason> |
|
NAE Agents Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
NAE Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <url>, <action>, <login> |
|
NAE Scripts Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <action>, <result> |
|
ND Snooping Events |
N/A |
<vmid>, <severity>, <subject>, <dport>, <object>, <dip>, <objecttype>, <smac>, <status>, <bytesin> |
|
NDM Events |
N/A |
<vmid>, <severity>, <subject>, <sip>, <sport>, <object>, <smac>, <dport>, <dip>, <dmac> |
|
NTP Events |
N/A |
<vmid>, <severity>, <subject>, <action>, <dname>, <status> |
|
OSPFv2 Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <status>, <action>, <object>, <reason> |
|
OSPFv3 Events |
N/A |
<vmid>, <severity>, <subject>, <action>, <object>, <reason>, <dinterface>, <status> |
|
Password Reset Events |
N/A |
<vmid>, <severity>, <subject> |
|
PIM Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <dinterface>, <dip> <result>, <object>, <sip>, <status>, <sport>, <sname>, <group>, <version>, <reason>, <dport>, <action>, <size> |
|
Policies Events |
N/A |
<vmid>, <severity>, <subject>, <policy>, <object> |
|
Port Access Roles Events |
N/A |
<vmid>, <severity>, <subject>, <result>, <policy> |
|
Port Events |
N/A |
<vmid>, <severity>, <subject>, <result>, <dinterface>, <status>, <policy>, <object>, <sip> |
|
Port Security Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <dmac>, <dport> |
|
Port Statistics Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
PORT_ACCESS Events |
N/A |
<vmid>, <severity>, <subject>, <dmac>, <dport>, <action>, <size>, <object>, <objectname>, <policy>, <dinterface> |
|
Power Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <status>, <objecttype>, <quantity> |
|
Power Over Ethernet Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <objecttype>, <object> |
|
Proxy ARP Events |
N/A |
<vmid>, <severity>, <subject>, <dport>, <object> |
|
Quality Of Service Events |
N/A |
<vmid>, <severity>, <subject>, <result> |
|
QoS ASIC Provider Events |
N/A |
<vmid>, <severity>, <subject>, <result>, <reason>, <dport> |
|
Rapid/VLAN Spanning Tree Protocol Events |
N/A |
<vmid>, <severity>, <subject>, <smac>, <dmac>, <object>, <sport>, <protname>, <objecttype>, <dport>, <dinterface>, <quantity> |
|
RBAC Events |
N/A |
<vmid>, <severity>, <subject>, <status> |
|
Redundant Management Events |
N/A |
<vmid>, <severity>, <subject>, <reason>, <object> |
|
Replication Manager Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
REST Events |
N/A |
<vmid>, <severity>, <subject>, <account>, <session>, <url>, <objecttype>, <object>, <action>, <login>, <policy>, <objectname>, <command>, <result>, <sip>, <sname> |
|
Self Test Events |
N/A |
<vmid>, <severity>, <subject>, <reason>, <object> |
|
sFlow Events |
N/A |
<vmid>, <severity>, <subject>, <action>, <result>, <object>, <dport>, <dinterface>, <dip>, <amount>, <size> |
|
SFTP Client Events |
N/A |
<vmid>, <severity>, <subject>, <status> |
|
SNMP Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
SSH Server Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <account>, <dip> |
|
SSH_CLIENT Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <object>, <account>, <dport> |
|
Supportability Events |
N/A |
<vmid>, <severity>, <subject>, <process>, <object>, <result>, <reason>, <dname>, <objecttype>, <objectname>, <status> |
|
SYS Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
SYSMON Events |
N/A |
<vmid>, <severity>, <subject> |
|
TCAM Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
Temperature Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <object>, <objectname>, <status> |
|
Time Management Events |
N/A |
<vmid>, <severity>, <subject> |
|
Transceiver Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <object>, <status>, <reason> |
|
UDLD Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface> |
|
UDP Broadcast Forwarder Events |
N/A |
<vmid>, <severity>, <subject> |
|
User Management Events |
N/A |
<vmid>, <severity>, <subject>, <login>, <account>, <policy> |
|
User-Based Tunnels Events |
N/A |
<vmid>, <severity>, <subject>, <sip>, <status>, <dip>, <dmac>, <dport> |
|
Virtual Switching Extension (VSX) Events |
N/A |
<vmid>, <severity>, <subject>, <dport>, <reason>, <objecttype>, <object>, <objectname>, <status>, <dinterface>, <dip> |
|
Virtual Switching Framework (VSF) Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <objecttype>, <dmac>, <reason>, <status>, <smac>, <sport>, <dport> |
|
VLAN Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <dport>, <dmac>, <objecttype> |
|
VLAN Interface Events |
N/A |
<vmid>, <severity>, <subject>, <dinterface>, <object>, <result> |
|
VRF Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
VRF Manager Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
VRRP Events |
N/A |
<vmid>, <severity>, <subject>, <objecttype>, <object>, <dinterface>, <dip>, <version>, <status> |
|
VSX Sync Events |
N/A |
<vmid>, <severity>, <subject>, <object> |
|
VXLAN Events |
N/A |
<vmid>, <severity>, <subject>, <object>, <dport>, <status>, <dip> |
|
Zero Touch Provisioning Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <object> |
|
Accounting Events |
N/A |
<vmid>, <severity>, <subject>, <dip>, <account> |
|
Central Source Events |
N/A |
<vmid>, <severity>, <subject>, <url> |
|
TPM Daemon Events |
N/A |
<vmid>, <severity>, <subject>, <process> |
|
Catch All : Level 2 |
N/A |
<vmid>, <severity>, <subject> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.710.0 |
Syslog - Aruba Switch |
New Device Documentation |
N/A |