Syslog - FireEye MPS

Device Details

Device Name	Syslog - FireEye MPS
Vendor	FireEye MPS
Device Type	FireEye MPS
Supported Model Name/Number	N/A
Supported Software Version	N/A
Collection Method	Syslog
Configurable Log Output	CEF
Log Source Type	Syslog - FireEye MPS
Log Processing Policy	LogRhythm Default V 2.0
Exceptions	N/A
Additional Information	https://docs.trellix.com/bundle/enterprise-security-manager-data-sources-configuration-reference-guide/page/GUID-DEE7F31A-23FA-4A89-B641-C2DF422E7748.html https://docs.logrhythm.com/docs/devices/syslog-log-sources/syslog-fireeye-ex

(List of LR tags used to parse the log information for each message type)

Type	Product Version	Supported Schema Fields
V 2.0 : FireEye MPS Events	N/A	<vendorinfo>, <process>, <severity>, <sip>, <sname>, <protname>, <dname>, <dip>, <sport>, <smac>, <dport>, <url>, <dmac>, <subject>

KB Version	Log Type	Change Type	Details
KB 7.1.657.0	Syslog - FireEye MPS	New Log Source Optimization (LSO) policy: LogRhythm Default v2.0	Optimized new log processing policy for Syslog - FireEye Web MPS/CMS/ETP/HX.