V 2.0 : LifeCycle Controller Log
Vendor Documentation
N/A |
Classification
Rule Name | Rule Type | Common Event | Classification |
|---|---|---|---|
V 2.0 : LifeCycle Controller Log | Base Rule | General Information | Information |
V 2.0 : Predictive Disk Failure | Sub Rule | Disk Drive Failure | Critical |
V 2.0 : Disk Fault Detected | Sub Rule | Disk Drive Failure | Critical |
V 2.0 : Fan Speed Warning | Sub Rule | The Speed Of The Fan Dropped Below Low Boundary | Warning |
V 2.0 : Fan Speed Critical | Sub Rule | Fan Speed Has Fallen Below Minimum Threshold | Error |
V 2.0 : Fan Failure | Sub Rule | Fan Failure | Critical |
V 2.0 : Power Supply Failed | Sub Rule | Power Supply Failure | Critical |
V 2.0 : Lifecycle Controller General Warning | Sub Rule | General Chassis Warning | Warning |
V 2.0 : Lifecycle Controller General Critical | Sub Rule | General Chassis Critical | Critical |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
|---|---|---|---|
Provider | <tag2> | Text/String | Identifies the provider that logged the event. The Name and GUID attributes are included if the provider used an instrumentation manifest to define its events; otherwise, the EventSourceName attribute is included if a legacy event provider (using the Event Logging API) logged the event. |
EventID Qualifiers | <vmid> | Number | The identifier that the provider used to identify the event. |
Level | <severity> | Text/String | The severity level defined in the event. |
Task | <vendorinfo> | Text/String | The task defined in the event. Task and opcode are typically used to identify the location in the application from where the event was logged. |
Keywords | <result> | Text/String | A bitmask of the keywords defined in the event. Keywords are used to classify types of events (for example, events associated with reading data). |
TimeCreated | N/A | N/A | The time stamp that identifies when the event was logged. The time stamp will include either the SystemTime attribute or the RawTime attribute. |
EventRecordID | N/A | N/A | The record number assigned to the event when it was logged. |
Channel | N/A | N/A | The channel to which the event was logged. |
Computer | <dname> | Text/String | The name of the computer on which the event occurred. |
Security | N/A | N/A | N/A |
Data | <process> | Text/String | N/A |
Data | <subject> | Text/String | N/A |