Skip to main content
Skip table of contents

V 2.0 Licensing Event

Vendor Documentation

Classification

Rule NameRule TypeCommon EventClassification
V 2.0 Licensing EventBase RuleGeneral Licensing InformationInformation
V 2.0 EVID 35000 Smart Licensing Reg. FailedSub RuleGeneral LicenseService ErrorError
V 2.0 EVID 35001 Smart Licensing DisabledSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35002 Smart Licensing Comm. FailureSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35003 Smart Licensing Comm. RestoredSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35004 Smart License Id Cert Renew FailSub RuleGeneral LicenseService ErrorError
V 2.0 EVID 35005 Smart License Id Cert Renew SuccSub RuleRenewInformation
V 2.0 EVID 35006 Smart License Agent Out Of CompSub RuleGeneral Cisco Security Agent NoticeWarning
V 2.0 EVID 35007 Smart Licensing Eval Period ExpSub RuleExpiredInformation
V 2.0 EVID 35008 Smart Licensing Auth. ExpiredSub RuleExpiredInformation
V 2.0 EVID 35009 Invalid Smart Licensing RequestSub RuleRequest Not ValidWarning
V 2.0 EVID 35010 License Is Set To Expire SoonSub RuleLicense Period Will Expire SoonWarning
V 2.0 EVID 35011 License ExpiredSub RuleLicense ExpiredCritical
V 2.0 EVID 35012 Device Count ExceededSub RuleLicense ExceededCritical
V 2.0 EVID 35013 License Deletion FailedSub RuleLicense Deletion FailedError
V 2.0 EVID 35014 License Create FailedSub RuleLicense Create FailedError
V 2.0 EVID 35015 License Update FailedSub RuleLicense Update FailedError
V 2.0 EVID 35016 Smart Licensing Reg. SuccessSub RuleRegistration CompleteInformation
V 2.0 EVID 35017 Smart Licensing Auth Renew SuccSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35018 Smart Licensing Auth Renew FailSub RuleLicense WarningWarning
V 2.0 EVID 35019 Smart Licensing De-Reg. SuccessSub RuleRegistration CompleteInformation
V 2.0 EVID 35020 Smart Licensing De-Reg. FailureSub RuleLicense WarningWarning
V 2.0 EVID 35021 Smart Licensing Id Cert ExpiredSub RuleLicense Expired - WarningWarning
V 2.0 EVID 35022 Smart Licensing HA Role ChangedSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35023 License Expiring In 90 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35024 License Expiring In 60 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35025 License Expiring In 30 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35026 License Out Of Compl> 5 DaysSub RuleLicense WarningWarning
V 2.0 EVID 35027 License Out Of Compl> 15 DaysSub RuleLicense WarningWarning
V 2.0 EVID 35028 License Out Of Compl> 30 DaysSub RuleLicense WarningWarning
V 2.0 EVID 35029 License Out Of Compl> 45 DaysSub RuleLicense WarningWarning
V 2.0 EVID 35030 License Exceeded 100%Sub RuleLicense ExceededCritical
V 2.0 EVID 35031 License Exceeded 125%Sub RuleLicense ExceededCritical
V 2.0 EVID 35032 License Expiring In 90 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35033 License Expiring In 60 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35034 License Expiring In 30 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35035 License ExpiredSub RuleLicense ExpiredCritical
V 2.0 EVID 35036 License Expiring In 90 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35037 License Expiring In 60 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35038 License Expiring In 30 DaysSub RuleLicense Nearing ExpirationError
V 2.0 EVID 35039 License ExpiredSub RuleLicense ExpiredCritical
V 2.0 EVID 35040 VM Licenses InstalledSub RuleLicense InstalledInformation
V 2.0 EVID 35041 Admin Licenses InstalledSub RuleLicense InstalledInformation
V 2.0 EVID 35042 Comm To Satellite Server FailedSub RuleDevice Communication FailureError
V 2.0 EVID 35043 Comm To Satellite Server RestoreSub RuleCommunication RestoredInformation
V 2.0 EVID 35044 Auth Renew To Satellite Svr SuccSub RuleAuthorization SuccessOther Audit Success
V 2.0 EVID 35045 Auth Renew To Satellite Svr FailSub RuleAuthorization FailedWarning
V 2.0 EVID 35046 License Reservation Code SuccessSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35047 Auth Code Installation SuccessSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35048 License Reservation FailedSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35049 Return Reservation SuccessSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35050 License Reservation, DisabledSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35051 Generate Reservation Code Succ.Sub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35052 Upload SLR Key SuccessSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35053 License ReservationSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35054 License Return Reservation SuccSub RuleGeneral Licensing InformationInformation
V 2.0 EVID 35055 License Reservation, DisabledSub RuleGeneral Licensing InformationInformation

Mapping with LogRhythm Schema

Device Key in Log MessageLogRhythm SchemaData TypeSchema Description
pri_numN/AN/APriority value of the message, a combination of the facility value and the severity value of the message. Priority value = (facility value * 8) + severity value.
The facility code valid options are:
LOCAL0 (Code = 16)
LOCAL1 (Code = 17)
LOCAL2 (Code = 18)
LOCAL3 (Code = 19)
LOCAL4 (Code = 20)
LOCAL5 (Code = 21)
LOCAL6 (Code = 22; default)
LOCAL7 (Code = 23)
timeN/AN/ADate of the message generation, according to the local clock of the originating Cisco ISE server, in the format Mmm DD hh:mm:ss.
IP address/hostnameN/AN/AIP address of the originating Cisco ISE node, or the hostname.
cat_name<vendorinfo>Text/StringLogging category name preceded by the CSCOxxx string.
msg_idN/AN/AUnique message ID; 1 to 4294967295. The message ID increases by 1 with each new message. Message IDs restart at 1 each time the application is restarted.
total_segN/AN/ATotal number of segments in a log message. Long messages are divided into more than one segment.
Note: The total_seg depends on the Maximum Length setting in the remote logging targets page. See Remote Logging Target Settings.
seg_numN/AN/ASegment sequence number within a message. Use this number to determine what segment of the message you are viewing.
timestampN/AN/ADate of the message generation, according to the local clock of the originating the Cisco ISE node, in the following format :
YYYY-MM-DD hh:mm:ss:xxx +/-zh:zm.
sequence_numN/AN/AGlobal counter of each message. If one message is sent to the local store and the next to the syslog server target, the counter increments by 2. Possible values are 0000000001 to 999999999.
msg_code<vmid>
<tag1>
NumberMessage code as defined in the logging categories.
msg_sev<severity>Text/StringMessage severity level of a log message.
msg_class<subject> Text/StringMessage class, which identifies groups of messages with the same context.
msg_text<action> Text/StringEnglish language descriptive text message.
key1N/AN/AN/A
key2N/AN/AN/A
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.