V 2.0 : Catch All : SEPM System Events
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
|---|---|---|---|
| V 2.0 : Catch All : SEPM System Events | Base Rule | General System Information | Information |
| V 2.0 : SEPM General Error Message | Sub Rule | General System Error | Error |
| V 2.0 : SEPM General Warning Message | Sub Rule | General System Warning | Warning |
| V 2.0 : SEPM General Information Message | Sub Rule | General System Information | Information |
| V 2.0 : SEPM General Critical Message | Sub Rule | General System Critical | Critical |
Mapping with LogRhythm Schema
| Device Key in Log Message | LogRhythm Schema | Data Type |
|---|---|---|
| Time Stamp | N/A | N/A |
| Severity | <severity> <tag1> | Text/String |
| Site Name | N/A | N/A |
| Server Name | <dname> | Text/String |
| Event Description | <subject> <tag2> | Text/String |