Syslog - threatER
Device Details
Device Name | threatER |
Vendor | threatER |
Device Type | threatER |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | N/A |
Log Source Type | Syslog - threatER |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
|---|---|---|
Catch-All | N/A | <tag1>, <severity> |
DNS Log Messages | N/A | <severity>, <objecttype>, <action>, <protname>, <reason>, <sip>, <dip>, <sport>, <dport>, <domainorigin> |
DNS Response Log Messages | N/A | <severity>, <objecttype>, <action>, <protname>, <reason>, <sip>, <dip>, <sport>, <dport>, <domainorigin>, <snatip>, <sname> |
Packet Log Messages | N/A | <severity>, <objecttype>, <action>, <group>, <protname>, <reason>, <sip>, <dip>, <sport>, <dport>, <object>, <threatname>, <objectname>, <quantity> |
System Log Messages | N/A | <severity>, <objecttype>, <subject> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.714.0 | Syslog - threatER | New Device Documentation | N/A |