Syslog - Tenable.ot Security
Device Details
Device Name | Tenable.ot Security |
|---|---|
Vendor | Tenable |
Device Type | OT Security |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | CEF |
Log Source Type | Syslog - Tenable.ot Security |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information | https://docs.tenable.com/PDFs/OT-Security/Tenable_OT_Security_Syslog_Integration_Guide.pdf |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
|---|---|---|
Tenable.ot Events | N/A | <vendorinfo>, <version>, <vmid>, <subject>, <severity>, <tag1>, <object>, <account>, <login>, <protname>, <result>, <dip>, <dmac>, <sip>, <smac>, <dport>, <sport>, <bytesin>, <action>, <cve>, <status>, <policy>, <objecttype> |
Catch-All | N/A | <tag1>, <severity> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.677.0 | Syslog - Tenable.ot Security | New Device Documentation | N/A |