Skip to main content
Skip table of contents

V 2.0 : AnyConnect VPN Session Event

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

V 2.0 : AnyConnect VPN Session Event

Base Rule

Information

VPN Session Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

N/A

N/A

Flow start time.

N/A

N/A

N/A

Flow stop time.

N/A

<object>

Text/String

Device name.

type

<vendorinfo>

Text/String

N/A

N/A

<action>

Text/String

N/A

Msg

<session>
<sip>
<login>
<protname>
<subject>

Text/String/Number
IP Address

N/A

<session>
<sip>
<login>
<dip>
<subject>

Text/String/Number
IP Address

N/A

<session>
<sip>
<login>
<object>
<subject>

Text/String/Number
IP Address

N/A

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.