TCAM Events
Vendor Documentation
https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf |
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
TCAM Events | Base Rule | General Information Log Message | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
Event ID | <vmid> | Number | Event ID 10201, 10202, 10203, 10204, 10205, 10206, 10207, 10208, 10209, 10210, 10211, 10212, 10213, 10214, 10215 |
Severity | <severity> | Text/String | For All: Information |
Message | <subject> | Text/String | Event ID 10201: |
<subject> | Text/String | Event ID 10202: | |
<subject> | Text/String | Event ID 10203: | |
<subject> | Text/String | Event ID 10204: | |
<subject> | Text/String | Event ID 10205: | |
<subject> | Text/String | Event ID 10206: | |
<subject> | Text/String | Event ID 10207: | |
<subject> | Text/String | Event ID 10208: | |
<subject> | Text/String | Event ID 10209: | |
<subject> | Text/String | Event ID 10210: | |
<subject> | Text/String | Event ID 10211: | |
<subject> | Text/String | Event ID 10212: | |
<subject> | Text/String | Event ID 10213: | |
<subject> | Text/String | Event ID 10214: | |
<subject> | Text/String | Event ID 10215: |