X.509Config Messages

Classification

Rule Name

Rule Type

Common Event

Classification

X.509Config Messages

Base Rule

General Information

Information

X.509 Cert Deleted

Sub Rule

Object Deleted/Removed

Access Success

X.509 Cert Generated

Sub Rule

Object Created

Access Success

X.509 Cert Exported

Sub Rule

Object Accessed

Access Success

X.509 Cert Changed

Sub Rule

Object Attribute Modified

Access Success

X.509 Cert Imported

Sub Rule

Object Added

Access Success

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<subject>

Text/String

N/A

<vmid>

Number

N/A

<object>

Text/String

N/A

<tag1>

Text/String

N/A

<login>

Text/String

N/A

<sip>

IP Address