Syslog - Generic Linux OS: Audispd Messages

Vendor Documentation

N/A

Rule Name	Rule Type	Common Event	Classification
Audispd Messages	Base Rule	General Information	Information
Audispd Debug Message	Sub Rule	General Debug Message	Information
Audispd Information Message	Sub Rule	General Information	Information
Audispd Notice Message	Sub Rule	General Notice	Information
Audispd Warning Message	Sub Rule	General Warning	Warning
Audispd Error Message	Sub Rule	General Error	Error
Audispd Critical Message	Sub Rule	General Critical	Critical
Audispd Alert Message	Sub Rule	General Alert	Critical
Audispd Emergency Message	Sub Rule	General Emergency Log Message	Critical

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<severity>	Text/String	N/A
N/A	<tag1>	Text/String	N/A
N/A	<dip>	IP Address	N/A
N/A	<dname>	Text/String	N/A
N/A	<process>	Text/String	N/A
N/A	<processid>	Number	N/A
N/A	<subject>	Text/String	N/A