v6.x Events - System

Vendor Documentation

Rule Name	Rule Type	Common Event	Classification
v6.x Events - System	Base Rule	General System Error	Error
System Info	Sub Rule	General System Information	Information
System Notice	Sub Rule	General System Notice	Information
System Error	Sub Rule	General EventSystem Error	Error
System Critical	Sub Rule	General System Critical	Critical
System Alert	Sub Rule	General System Alert	Critical

Device Key in Log Message	LogRhythm Schema	Data Type	Schema Description
logid	<vmid>	Number	The ID (logid) is a 10-digit field. It is a unique identifier for that specific log.
N/A	<severity>	Text\String	Each log entry contains a Level (level) field that indicates the estimated severity of the event that caused the log entry.
logdesc	<vendorinfo>	Text\String	N/A
ip	<sip>	IP Address	N/A
vd	<domainorigin>	Text\String	Name of the virtual domain in which the log message was recorded.
msg	<subject>	Text\String	N/A
type	<policy>	Text\String	N/A