Syslog - Imperva SecureSphere: V 2.0 : System Events

https://docs.imperva.com/bundle/v14.4-web-application-firewall-user-guide/page/3682.htm

V 2.0 : System Events

Base Rule

General System Event

Information

V 2.0 : User Logged In

Sub Rule

User Logon

Authentication Success

V 2.0 : Agent Status Changed

Sub Rule

Service Status Change

Other Audit Success

V 2.0 : Audit Error

Sub Rule

Audit Record Error

Error

V 2.0 : Agent Disk Quota Exceeded

Sub Rule

Limit Exceeded

Warning

V 2.0 : User Logged Out

Sub Rule

User Logoff

Authentication Success

V 2.0 : Gateway Throughput

Sub Rule

Gateway Message

Information

CEF:Version

N/A

N/A

N/A

N/A

N/A

N/A

Device Vendor

N/A

N/A

N/A

Device Product

N/A

<version>

Text/Stirng/Number

Device Version

N/A

<vmid>
<tag1>

Text/Stirng

deviceEventClassId

N/A

<subject>
<tag2>

Text/Stirng

Name

N/A

<severity>

Text/Stirng

Severity

suser

<login>

Text/Stirng

The system user who caused the event. It can
be a specific user who logged into the system or a system user.

rt

N/A

N/A

The system event time

cat

<objecttype>

Text/Stirng

The type of the event