Syslog Connection

Classification

Rule Name	Rule Type	Common Event	Classification
Syslog Connection	Base Rule	Connection Established	Network Traffic
Syslog Connection Broken	Sub Rule	Connection Lost	Network Traffic
Syslog Connection Established	Sub Rule	Connection Established	Network Traffic

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text\String
N/A	<process>	Text\String
N/A	<processid>	Number
N/A	<tag1>	Text\String
N/A	<dname>	Text\String
N/A	<dip>	IP Address
N/A	<dport>	Number

×