v6.x Events - Security-Rating
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
v6.x Events - Security-Rating | Base Rule | General Security Warning | Warning |
Security-Rating Info | Sub Rule | General Security Information | Information |
Security-Rating Notice | Sub Rule | General Security Note | Information |
Security-Rating Error | Sub Rule | General Security Error | Error |
Security-Rating Critical | Sub Rule | General Security Critical | Critical |
Security-Rating Alert | Sub Rule | General Security Alert | Warning |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
logid | <vmid> | Number | The ID (logid) is a 10-digit field. It is a unique identifier for that specific log. |
N/A | <severity> | Text\String | Each log entry contains a Level (level) field that indicates the estimated severity of the event that caused the log entry. |
logdesc | <vendorinfo> | Text\String | N/A |
vd | <domainorigin> | Text\String | Name of the virtual domain in which the log message was recorded. |
type | <policy> | Text\String | N/A |