V 2.0 : Client Status Events
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
V 2.0 : Client Status Events | Base Rule | Host Status Messages | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
N/A | N/A | N/A | Vendor or Manufacturer Name |
N/A | N/A | N/A | Product Name |
N/A | N/A | N/A | Product Version |
N/A | <vmid> | Text/String | EventID |
ComputerId | N/A | N/A | N/A |
HostName | <sname> | Text/String | N/A |
ClientNetworkLocation | <sip> | IP Address | N/A |
ServerNetworkLocation | <dip> | IP Address | N/A |
SendState | N/A | N/A | N/A |
ReceiveState | N/A | N/A | N/A |
Status | <status> | Text/String | N/A |
LastRegistration | N/A | N/A | N/A |
FullVersion | <version> | Text/String | N/A |
ProtocolVersion | N/A | N/A | N/A |
ValidKey | N/A | N/A | N/A |
RegisteredWithTLS | N/A | N/A | N/A |