VXLAN Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

VXLAN Events

Base Rule

General Information Log Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 8101, 8102, 8103, 8104, 8105, 8106, 8107, 8108, 8109, 8110, 8111, 8112, 8113, 8114, 8115, 8116, 8117

Severity

<severity>

Text/String

For All: Information
For 8101, 8103, 8107: Error

Message

<subject>
<object>

Text/String

Event ID 8101:
Event raised when VNI creation fails

<subject>
<object>

Text/String

Event ID 8102:
Event raised when VNI created

<subject>
<object>

Text/String

Event ID 8103:
Event raised when VNI deletion fails

<subject>
<object>

Text/String

Event ID 8104:
Event raised when VNI is deleted

<subject>
<object>

Text/String

Event ID 8105:
Event raised when Vtep-Peer is created

<subject>
<object>

Text/String

Event ID 8106:
Event raised when Vtep-Peer has been deleted

<subject>
<object>

Text/String

Event ID 8107:
Event raised when Vtep-Peer deletion fails

<subject>
<object>
<dport>

Text/String/Number

Event ID 8108:
Event raised when Access-Port has been created

<subject>
<object>
<dport>

Text/String/Number

Event ID 8109:
Event raised when Access-Port has been deleted

<subject>
<status>

Text/String

Event ID 8110:
Event raised when Vtep-Peer status is changed to operational

<subject>
<status>

Text/String

Event ID 8111:
Event raised when Vtep-Peer status is changed to configuration error

<subject>
<status>

Text/String

Event ID 8112:
Event raised when Vtep-Peer status is changed to no hardware resources

<subject>
<status>

Text/String

Event ID 8113:
Event raised when Vtep-Peer status is changed to activating

<subject>
<dip>

Text/String/IP Address

Event ID 8114:
Event raised when a VxLAN tunnel is added to hardware

<subject>
<dip>

Text/String/IP Address

Event ID 8115:
Event raised when a VxLAN tunnel is deleted from hardware

<subject>
<dip>

Text/String/IP Address

Event ID 8116:
Event raised when a VxLAN tunnel has its deletion deferred by L3PD

<subject>
<dip>

Text/String/IP Address

Event ID 8117:
Event raised when a VxLAN tunnel has its deferred deletion canceled