Syslog - NetScout OCI CEF

Device Name

NetScout OCI

Vendor

NetScout Systems

Device Type

Omnis Cyber Intelligence

Supported Model Name/Number

N/A

Supported Software Version

N/A

Collection Method

Syslog

Configurable Log Output

CEF

Log Source Type

Syslog - NetScout OCI CEF

Log Processing Policy

LogRhythm Default V 2.0

Exceptions

N/A

Additional Information

N/A

Attack Surface Event Messages

N/A

<vendorinfo>, <version>, <vmid>, <object>, <severity>, <objecttype>, <subject>, <sname>, <sip>, <dname>, <dip>, <quantity>, <url>, <sport>

Behavioral Analytics Messages

N/A

<vendorinfo>, <version>, <vmid>, <object>, <severity>, <objecttype>, <subject>, <session>, <sessiontype>, <sip>, <dip>, <protname>, <quantity>, <url>

Catch-All: Level 1

N/A

<tag1>, <severity>

Compliance Messages

N/A

<vendorinfo>, <version>, <vmid>, <object>, <severity>, <objecttype>, <subject>, <dname>, <dip>, <protname>, <quantity>, <url>

IDS Event Messages

N/A

<vendorinfo>, <version>, <vmid>, <object>, <severity>, <objecttype>, <subject>, <sip>, <dip>, <sport>, <dport>, <sname>, <useragent>, <command>, <protname>, <quantity>, <url>

Policy Violation

N/A

<vendorinfo>, <version>, <vmid>, <object>, <severity>, <objecttype>, <subject>, <sname>, <sip>, <dname>, <dip>, <sport>, <protname>, <quantity>, <url>

Threat Intelligence Messages

N/A

<vendorinfo>, <version>, <vmid>, <object>, <severity>, <objecttype>, <subject>, <sname>, <sip>, <dname>, <dip>, <protname>, <quantity>, <url>

KB 7.1.705.0

Syslog - NetScout OCI CEF

New Device Documentation

N/A