Syslog - Generic Linux OS: Osqueryd Messages

Vendor Documentation

N/A

Rule Name	Rule Type	Common Event	Classification
Osqueryd Messages	Base Rule	General Information	Information
Osqueryd Emergency Message	Sub Rule	General Emergency Log Message	Critical
Osqueryd Alert Message	Sub Rule	General Alert	Critical
Osqueryd Critical Message	Sub Rule	General Critical	Critical
Osqueryd Error Message	Sub Rule	General Error	Error
Osqueryd Warning Message	Sub Rule	General Warning	Warning
Osqueryd Notice Message	Sub Rule	General Notice	Information
Osqueryd Information Message	Sub Rule	General Information	Information
Osqueryd Debug Message	Sub Rule	General Debug Message	Information

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
N/A	<severity>	Text/String	N/A
N/A	<tag1>	Text/String	N/A
N/A	<dip>	IP Address	N/A
N/A	<dname>	Text/String	N/A
N/A	<process>	Text/String	N/A
N/A	<processid>	Number	N/A
N/A	<subject>	Text/String	N/A