Log Fields and Parsing

This section details the log fields available in this log message type, along with values parsed for both LogRhythm Default and LogRhythm Default v2.0 policies. A value of "N/A" (not applicable) means that there is no value parsed for a specified log field.

Log FieldLogRhythm Default

LogRhythm Default v2.0

N/A<severity>N/A
N/A<dname>N/A
N/A<subject>N/A
Message Repeated<quantity>N/A
N/A<url>N/A
N/A<responsecode>N/A
N/A<protname>N/A

Log Processing Settings

This section details log processing changes made from the LogRhythm Default policy to LogRhythm Default v2.0. In some cases, base rules are broken down into sub-rules to appropriately parse log message types by their event types.

LogRhythm Default

Regex IDRule NameRule TypeCommon EventsClassifications
1007230Last Message RepeatedBase RuleLast Message RepeatedInformation

LogRhythm Default v2.0

N/A