VRRP Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

VRRP Events

Base Rule

VRRP Debug Message

Other Operations

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 3701, 3702, 3703, 3704, 3705, 3706, 3707, 3708, 3709, 3710, 3711, 3712, 3713, 3714, 3715, 3716, 3717, 3718, 3719, 3720, 3721, 3722, 3723, 3724, 3725, 3726, 3727, 3728, 3729

Severity

<severity>

Text/String

For All: Information

Message

<subject>

Text/String

Event ID 3701:
Logs VRRP global enable event

<subject>

Text/String

Event ID 3702:
Logs VRRP global disable event

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3703:
Logs virtual router has taken control of owner IP

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3704:
Logs virtual router has taken control of backup IP

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3705:
Logs virtual router has lost control of backup IP

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3706:
Logs creation of virtual router on interface

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3707:
Logs deletion of virtual router from interface

<subject>
<objecttype>
<dip>
<object>
<dinterface>

Text/String/IP Address

Event ID 3708:
Logs addition of IP address to virtual router

<subject>
<objecttype>
<dip>
<object>
<dinterface>

Text/String/IP Address

Event ID 3709:
Logs deletion of IP address from virtual router

<subject>
<objecttype>
<object>
<version>
<dinterface>

Text/String

Event ID 3710:
Logs version change for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3711:
Logs advertisement timer has changed for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3712:
Logs preempt delay timer has changed for virtual router

<subject>
<objecttype>
<object>
<status>
<dinterface>

Text/String

Event ID 3713:
Logs state has changed for virtual router on interface

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3714:
Logs preempt option has been enabled for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3715:
Logs virtual IP ping has been enabled for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3716:
Logs virtual router has been enabled on interface

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3717:
Logs preempt option has been disabled for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3718:
Logs virtual IP ping has been disabled for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3719:
Logs virtual router has been disabled on interface

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3720:
Logs priority has been changed for virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3721:
Logs virtual router mode has been changed

<subject>
<objecttype>
<object>

Text/String

Event ID 3722:
Logs track object has been associated with virtual router

<subject>
<objecttype>
<object>

Text/String

Event ID 3723:
Logs track object has been de-associated from virtual router

<subject>

Text/String

Event ID 3724:
Logs track object has been created

<subject>

Text/String

Event ID 3725:
Logs track object has been deleted

<subject>
<status>

Text/String

Event ID 3726:
Logs track object state change

<subject>
<dinterface>

Text/String

Event ID 3727:
Logs track object association with interface

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3728:
Logs authentication failures on virtual router

<subject>
<objecttype>
<object>
<dinterface>

Text/String

Event ID 3729:
Logs authentication failures on virtual router