Traffic Log Messages

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

Traffic Log Messages

Base Rule

Network Traffic

Network Traffic

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text/String

N/A

<dip>

Number

N/A

<sname>

Text/String

N/A

<protname>

Text/String

N/A

<login>

Text/String

N/A

<domainorigin>

Text/String

N/A

<process>

Text/String

N/A

<processid>

Number

N/A

<object>

Text/String

N/A

<objectname>

Text/String

N/A

<version>

Number

N/A

<command>

Text/String

N/A

<bytesin>

Number

N/A

<bytesout>

Number

N/A

<tag1>

Text/String