Device Details
|
Device Name |
Tenable.ot Security |
|---|---|
|
Vendor |
Tenable |
|
Device Type |
OT Security |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
CEF |
|
Log Source Type |
Syslog - Tenable.ot Security |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://docs.tenable.com/PDFs/OT-Security/Tenable_OT_Security_Syslog_Integration_Guide.pdf |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
Tenable.ot Events |
N/A |
<vendorinfo>, <version>, <vmid>, <subject>, <severity>, <tag1>, <object>, <account>, <login>, <protname>, <result>, <dip>, <dmac>, <sip>, <smac>, <dport>, <sport>, <bytesin>, <action>, <cve>, <status>, <policy>, <objecttype> |
|
Catch-All |
N/A |
<tag1>, <severity> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.677.0 |
Syslog - Tenable.ot Security |
New Device Documentation |
N/A |