Skip to main content
Skip table of contents

V 2.0 Device Containment Events

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

V 2.0 Device Containment Events

Base Rule

Information

General Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

 N/A

N/A

Flow start time

N/A

N/A 

N/A

Flow stop time

N/A

<object>

Text/String

Device

N/A

<vendorinfo>

Text/String

Event type

type

<action>

Text/String

N/A

ssid

N/A 

N/A

N/A

bssid

N/A 

N/A

N/A

src

<smac>

Text/String

N/A

dst

<dmac>

Text/String

N/A

wired_mac

N/A

N/A

N/A

vlan_id

N/A

N/A

N/A

channel

N/A

N/A

N/A

rssi

N/A

N/A

N/A

fc_type

N/A

N/A

N/A

fc_subtype

N/A

N/A

N/A

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.