v6.x Events - System

v6.x Events - System

Base Rule

General System Error

Error

System Info

Sub Rule

General System Information

Information

System Notice

Sub Rule

General System Notice

Information

System Error

Sub Rule

General EventSystem Error

Error

System Critical

Sub Rule

General System Critical

Critical

System Alert

Sub Rule

General System Alert

Critical

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

logid

<vmid>

Number

The ID (logid) is a 10-digit field. It is a unique identifier for that specific log.

N/A

<severity>

Text\String

Each log entry contains a Level (level) field that indicates the estimated severity of the event that caused the log entry.

logdesc

<vendorinfo>

Text\String

N/A

ip

<sip>

IP Address

N/A

vd

<domainorigin>

Text\String

Name of the virtual domain in which the log message was recorded.

msg

<subject>

Text\String

N/A

type

<policy>

Text\String

N/A