Classification

Rule NameRule TypeCommon EventClassfication
LogRhythm DiagnosticsBase RuleLogRhythm Diagnostics EventOther Operations
JwtRetrievalFailureSub RuleJwt Retrieval FailureWarning
DPtoDXJWTFailureSub RuleDPtoDX JWT FailureWarning
DPtoDXMessagingGatewayOfflineSub RuleDPtoDX Messaging Gateway OfflineWarning
DPtoDXMessagingGatewayOnlineSub RuleDPtoDX Messaging Gateway OnlineInformation
DPtoDXMessagingReceiverOnlineSub RuleDPtoDX Messaging Gateway OnlineInformation
DPtoDXMessagingReceiverOfflineSub RuleDPtoDX Messaging Receiver OfflineWarning
DPtoDXDeserializationFailureOnLoadPersistSub RuleDPtoDX Deserialization FailureWarning
DPtoDXDeserializationFailureOnEnqueueSub RuleDPtoDX Deserialization FailureWarning
MessagingPersistenceLoadingSub RuleLogRhythm Message LoadingInformation
MessagingPersistenceStoringSub RuleLogRhythm Message StoringWarning
LogRhythm MPE Event 2052Sub RuleLogRhythm MPE Rule Performing PoorlyWarning
LogRhythm Mediator Event 10055Sub RuleInsertMgr Event Spooled Count Exceeds 5MillionWarning
LogRhythm Mediator Event 10054Sub RuleInsertMgr Event Spooled Count Exceeds 1MillionWarning
LogRhythm Mediator Event 10053Sub RuleInsertMgr Log Spooled Count Exceeds 5MillionWarning
LogRhythm Mediator Event 10052Sub RuleInsertMgr Log Spooled Count Exceeds 1MillionWarning
LogRhythm Mediator Event 10051Sub RuleUnprocessed Log Spooled Count Exceeds 5MillionWarning
LogRhythm Mediator Event 10050Sub RuleUnprocessed Log Spooled Count Exceeds 1MillionWarning
LogRhythm Agent Event 30002Sub RuleSmart Response Action Completed ErrorError
LogRhythm Agent Event 30001Sub RuleSmart Response Action Completed OKInformation
LogRhythm Agent Event 30000Sub RuleFailed To Start Smart Response ThreadError
LogRhythm Agent Event 20001Sub RuleFailed To Queue Registry Monitor Log DataError
LogRhythm Agent Event 20000Sub RuleFailed To Load Registry Monitor ConfigError
LogRhythm Agent Event 10118Sub RuleFailed To Load Secure Syslog CertificateError
LogRhythm Agent Event 10117Sub RuleFailed To Create SSL CertificateError
LogRhythm Agent Event 10116Sub RuleSecure Syslog Authentication FailedError
LogRhythm Agent Event 7014Sub RuleAgent Needs Reboot After UpdateError
LogRhythm Agent Event 7013Sub RuleAgent UpdatedInformation
LogRhythm Agent Event 7012Sub RuleCannot Update AgentError
LogRhythm Agent Event 7011Sub RuleBeginning Agent UpdateInformation
LogRhythm Mediator Event 10042Sub RuleAgent Software Update Package SentInformation
LogRhythm Job Manager Event 6013Sub RuleLIMaintenance Items RemovedInformation
LogRhythm Job Manager Event 6012Sub RuleLIMaintenance ErrorError
LogRhythm Agent Event 7010Sub RuleIncorrect Windows OS LogSourceError
LogRhythm Agent Event 6059Sub RuleNo Matching Enum Closest Match In Sflow Diags 6059Information
LogRhythm Agent Event 6058Sub RuleFailed To Extract Sflow DataError
LogRhythm Agent Event 6057Sub RuleFailed To Start Sflow ReaderThreadInformation
LogRhythm Agent Event 6056Sub RuleFailed To Bind Sflow Server SocketError
LogRhythm Agent Event 6055Sub RuleFailed To Parse Sflow Server IPError
LogRhythm Agent Event 6053Sub RuleNo Matching Enum Closest Match In Sflow Diags 6053Information
LogRhythm Agent Event 6052Sub RuleNo Matching Enum Closest Match In Sflow Diags 6052Information
LogRhythm Agent Event 6015Sub RuleData Loss Defender Imapi Service ErrorWarning
LogRhythm Agent Event 6014Sub RuleData Loss Defender File Watch ErrorError
LogRhythm Agent Event 6013Sub RuleFailed To Start Data Loss Defender ThreadError
LogRhythm Agent Event 6012Sub RuleFailed To Start Data Loss DefenderError
LogRhythm Agent Event 4037Sub RulePlatform Manager At CapacityWarning
LogRhythm Agent Event 4035Sub RuleAgent Acceptance Pending WarningWarning
LogRhythm Agent Event 10207Sub RuleRealTime FileMonitor Driver Not InstalledWarning
LogRhythm Agent Event 10204Sub RuleRealTime FileMonitor Driver ConnectedInformation
LogRhythm Agent Event 10203Sub RuleRealTime FileMonitor Driver ConnectFailedError
LogRhythm Agent Event 10202Sub RuleRealTime FileMonitor Driver StartFailedError
LogRhythm Agent Event 10201Sub RuleRealTime FileMonitor Driver StopInformation
LogRhythm Agent Event 10200Sub RuleRealTime FileMonitor Driver StartInformation
LogRhythm Agent Event 10111Sub RuleNo Matching EnumerationInformation
LogRhythm Agent Event 10108Sub RuleNo Matching Enum Closest Match In Msg Src MethodsInformation
LogRhythm Job Manager Event 6204Sub RuleSubscription License For KB Has ExpiredError
LogRhythm Job Manager Event 6203Sub RuleSubscription License For KB Will Expire In 30 DaysWarning
LogRhythm Job Manager Event 5557Sub RuleFailed To Collect CMDB StatsWarning
LogRhythm Job Manager Event 5556Sub RuleCMDB Capacity ErrorError
LogRhythm Job Manager Event 5555Sub RuleCMDB Capacity WarningWarning
LogRhythm Job Manager Event 6202Sub RuleLicense MPS Error DeploymentWarning
LogRhythm Job Manager Event 6201Sub RuleLicense MPS Error Log ManagerWarning
LogRhythm Agent Event 7010Sub RuleLogRhythm Agent Incorrect Log Source OSError
LogRhythm Agent Event 2064Sub RuleLogRhythm Agent Max Memory ErrorError
LogRhythm Agent Event 10208Sub RuleReal Time File Monitor Driver File MissingCritical
LogRhythm Agent Event 10206Sub RuleReal Time File Monitor Driver Stop FailedWarning
LogRhythm Agent Event 10205Sub RuleReal Time File Monitor Driver Disconnect FailedError
LogRhythm Agent Event 10207Sub RuleRealtime File Monitor Driver Not InstalledCritical
LogRhythm Mediator Event 11009Sub RuleBatch Job Submit WarningWarning
LogRhythm Mediator Event 11008Sub RuleFailed To Rotate LogError
LogRhythm Mediator Event 11007Sub RuleDeleting Disk Queue Spool FileWarning
LogRhythm Mediator Event 11006Sub RuleError Loading Spooled Insert FileCritical
LogRhythm Mediator Event 11005Sub RuleError Spooling Realtime QueueCritical
LogRhythm Mediator Event 11004Sub RuleError Deserializing QueueCritical
LogRhythm Mediator Event 11003Sub RuleError Serializing QueueCritical
LogRhythm Mediator Event 11001Sub RuleSmart Response Processing ErrorError
LogRhythm Mediator Event 11000Sub RuleSmart Response Status Update ErrorError
LogRhythm Mediator Event 6012Sub RuleRecycling Mediator Server Due To Hung MPE ThreadsError
LogRhythm Mediator Event 6011Sub RuleFailed To Refresh List ProxiesError
LogRhythm Mediator Event 2102Sub RuleFailed To Start Data ProviderCritical
LogRhythm Mediator Event 2101Sub RuleInactive Archive Disk Space LowError
LogRhythm Mediator Event 2100Sub RuleActive Archive Disk Space LowError
LogRhythm Mediator Event 2067Sub RuleSQL Server Agent Not RunningCritical
LogRhythm Mediator Event 2066Sub RuleSQL Server Agent Query FailedCritical
LogRhythm Mediator Event 2065Sub RuleMin State Space ReachedError
LogRhythm Mediator Event 2064Sub RuleMin Unprocessed Spool ReachedError
LogRhythm Mediator Event 2063Sub RuleMax Unprocessed Spool ExceededError
LogRhythm Mediator Event 2062Sub RuleMax EM Insert Manager Spool ExceededError
LogRhythm Mediator Event 2061Sub RuleMax LM Insert Manager Spool ExceededError
LogRhythm Mediator Event 2060Sub RuleFailed To Load Entity InfoError
LogRhythm MPE Event 5107Sub RuleLogMart Suspend Log Processing Flag DisabledConfiguration
LogRhythm MPE Event 5106Sub RuleLogMart Suspend Log Processing Flag EnabledConfiguration
LogRhythm MPE Event 2051Sub RuleCircular Reference In Sort Above ListsWarning
LogRhythm AIE Event 8029Sub RuleFailure During Data RefreshError
LogRhythm AIE Event 8028Sub RuleFailed To Restore Rule StateError
LogRhythm AIE Event 2066Sub RuleFailed Software Integrity TestCritical
LogRhythm AIE Event 6011Sub RuleFailed To Refresh List ProxiesError
LogRhythm Agent Event 10022Sub RulePosition File InaccessibleError
LogRhythm ARM Event 6011Sub RuleFailed To Refresh List ProxiesError
LogRhythm ARM Event 3013Sub RuleNFN Text File FailureError
LogRhythm ARM Event 3012Sub RuleNFN Startup SuccessStartup and Shutdown
LogRhythm Linux Agent Event 8511Sub RuleRTFIM Failed To Remove Audit RuleWarning
LogRhythm Linux Agent Event 8510Sub RuleRTFIM Failed To Remove Inode RuleWarning
LogRhythm Linux Agent Event 8509Sub RuleRTFIM Failed To Add Inode RuleError
LogRhythm Linux Agent Event 8508Sub RuleRTFIM Failed To Open InotifyCritical
LogRhythm Linux Agent Event 8507Sub RuleRTFIM Failed To Start RTFIM ThreadCritical
LogRhythm Linux Agent Event 8506Sub RuleRTFIM Failed To Start Inode ThreadCritical
LogRhythm Linux Agent Event 8505Sub RuleRTFIM Failed To Add Audit RuleError
LogRhythm Linux Agent Event 8504Sub RuleRTFIM Failed To Start Audit ThreadCritical
LogRhythm Linux Agent Event 8503Sub RuleRTFIM Failed To Set Audit Backlog LimitError
LogRhythm Linux Agent Event 8502Sub RuleRTFIM Failed To Set Audit PIDCritical
LogRhythm Linux Agent Event 8501Sub RuleRTFIM Audit Not EnabledCritical
LogRhythm Linux Agent Event 8500Sub RuleRTFIM Failed To Open AuditCritical
LogRhythm Job Manager Event 7007Sub RuleAD Group User Updated ErrorCritical
LogRhythm Job Manager Event 7006Sub RuleAD Group User Created ErrorCritical
LogRhythm Job Manager Event 7005Sub RuleAD Group Profile ConflictCritical
LogRhythm Job Manager Event 7004Sub RuleAD Group User Profile ConflictCritical
LogRhythm Job Manager Event 7003Sub RuleAD Group User UpdatedAccount Modified
LogRhythm Job Manager Event 7002Sub RuleAD Group User DisabledAccess Revoked
LogRhythm Job Manager Event 7001Sub RuleAD Group User CreatedAccount Created
LogRhythm Linux Agent Event 6011Sub RuleRTFIM Failed To Remove Audit RuleWarning
LogRhythm Linux Agent Event 6010Sub RuleRTFIM Failed To Remove Inode RuleWarning
LogRhythm Linux Agent Event 6009Sub RuleRTFIM Failed To Add Inode RuleError
LogRhythm Linux Agent Event 6008Sub RuleRTFIM Failed To Open InotifyCritical
LogRhythm Linux Agent Event 6007Sub RuleRTFIM Failed To Start RTFIM ThreadCritical
LogRhythm Linux Agent Event 6006Sub RuleRTFIM Failed To Start Inode ThreadCritical
LogRhythm Linux Agent Event 6005Sub RuleRTFIM Failed To Add Audit RuleError
LogRhythm Linux Agent Event 6004Sub RuleRTFIM Failed To Start Audit ThreadCritical
LogRhythm Linux Agent Event 6003Sub RuleRTFIM Failed To Set Audit Backlog LimitError
LogRhythm Linux Agent Event 6002Sub RuleRTFIM Failed To Set Audit PIDCritical
LogRhythm Linux Agent Event 6001Sub RuleRTFIM Audit Not EnabledCritical
LogRhythm Linux Agent Event 6000Sub RuleRTFIM Failed To Open AuditCritical
LogRhythm AIEDP Event 4034Sub RuleClient Certificate Name MismatchCritical
LogRhythm AIEDP Event 4033Sub RuleFailed To Write Queued Log Data To Suspense FilesError
LogRhythm AIEDP Event 4032Sub RuleFailed To Load Client Certificate From StoreError
LogRhythm AIEDP Event 4031Sub RuleServer Certificate Trusted Authority Check FailedCritical
LogRhythm AIEDP Event 4030Sub RuleServer Certificate Revocation Check FailedCritical
LogRhythm AIEDP Event 4029Sub RuleServer Certificate Is MissingError
LogRhythm AIEDR Event 1004Sub RuleAIE Shutdown FailureError
LogRhythm AIEDR Event 2005Sub RuleFailed To Connect To EMDBError
LogRhythm AIEDR Event 3023Sub RuleAIE Invalid Payload SizeError
LogRhythm AIEDR Event 2047Sub RuleAIE Shutdown TimeoutError
LogRhythm AIEDR Event 2046Sub RuleProcessing Thread Join TimeoutError
LogRhythm AIEDR Event 1003Sub RuleThe AIEDR Service Failed To StartError
LogRhythm Job Manager Event 6113Sub RuleKB CE Migration DetectedInformation
LogRhythm Job Manager Event 6112Sub RuleKB Auto Sync FailedError
LogRhythm Job Manager Event 6111Sub RuleKB Auto Sync CompletedInformation
LogRhythm Job Manager Event 6102Sub RuleKB Auto Download FailedError
LogRhythm Job Manager Event 6101Sub RuleKB Auto Download CompletedInformation
LogRhythm KB Admin Service Event 1003Sub RuleNo Deployment Record FoundError
LogRhythm KB Admin Service Event 1002Sub RuleGet Latest KB SuccessInformation
LogRhythm KB Admin Service Event 1001Sub RuleCheck For Update SuccessInformation
LogRhythm KB Download Service Event 1002Sub RuleGet Latest KB Without Snapshot FailureError
LogRhythm KB Download Service Event 1001Sub RuleCheck For Updates FailureError
LogRhythm Mediator Event 11002 : Type ISub RuleFailed To Submit Batch Job To Database : Type IWarning
LogRhythm Mediator Event 10041Sub RuleInsertMgr Event Spooled Count Exceeds 1BillionWarning
LogRhythm Mediator Event 10040Sub RuleInsertMgr Event Spooled Count Exceeds 500MillionWarning
LogRhythm Mediator Event 10039Sub RuleInsertMgr Event Spooled Count Exceeds 250MillionWarning
LogRhythm Mediator Event 10038Sub RuleInsertMgr Event Spooled Count Exceeds 100MillionWarning
LogRhythm Mediator Event 10037Sub RuleInsertMgr Event Spooled Count Exceeds 50MillionWarning
LogRhythm Mediator Event 10036Sub RuleInsertMgr Event Spooled Count Exceeds 25MillionWarning
LogRhythm Mediator Event 10035Sub RuleInsertMgr Event Spooled Count Exceeds 10MillionWarning
LogRhythm Mediator Event 10034Sub RuleInsertMgr Log Spooled Count Exceeds 1BillionWarning
LogRhythm Mediator Event 10033Sub RuleInsertMgr Log Spooled Count Exceeds 500MillionWarning
LogRhythm Mediator Event 10032Sub RuleInsertMgr Log Spooled Count Exceeds 250MillionWarning
LogRhythm Mediator Event 10031Sub RuleInsertMgr Log Spooled Count Exceeds 100MillionWarning
LogRhythm Mediator Event 10030Sub RuleInsertMgr Log Spooled Count Exceeds 50MillionWarning
LogRhythm Mediator Event 10029Sub RuleInsertMgr Log Spooled Count Exceeds 25MillionWarning
LogRhythm Mediator Event 10028Sub RuleInsertMgr Log Spooled Count Exceeds 10MillionWarning
LogRhythm Mediator Event 10027Sub RuleUnprocessed Log Spooled Count Exceeds 1BillionWarning
LogRhythm Mediator Event 10026Sub RuleUnprocessed Log Spooled Count Exceeds 500MillionWarning
LogRhythm Mediator Event 10025Sub RuleUnprocessed Log Spooled Count Exceeds 250MillionWarning
LogRhythm Mediator Event 10024Sub RuleUnprocessed Log Spooled Count Exceeds 100MillionWarning
LogRhythm Mediator Event 10023Sub RuleUnprocessed Log Spooled Count Exceeds 50MillionWarning
LogRhythm Mediator Event 10022Sub RuleUnprocessed Log Spooled Count Exceeds 25MillionWarning
LogRhythm Mediator Event 10021Sub RuleUnprocessed Log Spooled Count Exceeds 10MillionWarning
LogRhythm Mediator Event 11002Sub RuleFailed To Submit Batch Job To DatabaseCritical
LogRhythm Job Manager Event 6011Sub RuleList Auto Import File ImportedInformation
LogRhythm Job Manager Event 6010Sub RuleList Auto Import Error Importing FileError
LogRhythm Job Manager Event 6009Sub RuleList Auto Import Directory Not AccessibleError
LogRhythm Agent Event 6059Sub RuleFailed To Process sFlow DataWarning
LogRhythm Agent Event 6058Sub RuleFailed To Extract sFlow Data From PacketWarning
LogRhythm Agent Event 6057Sub RuleFailed To Start sFlow Server ThreadCritical
LogRhythm Agent Event 6056Sub RuleFailed To Bind To sFlow Server SocketCritical
LogRhythm Agent Event 6055Sub RuleFailed To Parse sFlow Server IP AddressCritical
LogRhythm Agent Event 6054Sub RuleFailed To Delete sFlow Suspense FileError
LogRhythm Agent Event 6053Sub RuleFailed To Open sFlow Suspense FileError
LogRhythm Agent Event 6052Sub RuleFailed To Locate Oldest sFlow Suspense FileError
LogRhythm Agent Event 6051Sub RuleFailed To Start sFlow ServerCritical
Qualys Agent Event 21012Sub RuleError Querying Qualys APIError
Qualys Agent Event 21011Sub RuleInvalid Qualys User Name Or PasswordError
Qualys Agent Event 21007Sub RuleError Getting Message From Qualys Message QueueError
Qualys Agent Event 21006Sub RuleError Connecting To Qualys APIError
LogRhythm MPE Event 5108Sub RuleLogRhythm MPE LogMart Update WarningWarning
LogRhythm Mediator Event 7103Sub RuleLog Source Acceptance Rejected WarningWarning
LogRhythm Mediator Event 7102Sub RuleLog Source Acceptance Pending WarningWarning
LogRhythm Mediator Event 7101Sub RuleAgent Acceptance RejectedInformation
LogRhythm Mediator Event 7100Sub RuleAgent Acceptance PendingInformation
LogRhythm ARM Event 2019Sub RuleFailed Software Integrity TestCritical
LogRhythm ARM Event 2018Sub RuleFIPS Mode Windows Auth OnlyWarning
LogRhythm Job Manager Event 6006Sub RuleFailed Software Integrity TestCritical
LogRhythm Job Manager Event 6005Sub RuleFIPS Mode Windows Auth OnlyWarning
LogRhythm AI Engine Comm Manager Event 4019Sub RuleFailed Software Integrity TestCritical
LogRhythm AI Engine Comm Manager Event 4018Sub RuleClient Certificate Trusted Authority Check FailedCritical
LogRhythm AI Engine Comm Manager Event 4017Sub RuleClient Certificate Revocation Check FailedCritical
LogRhythm AI Engine Comm Manager Event 4016Sub RuleClient Certificate RequiredCritical
LogRhythm AI Engine Comm Manager Event 4015Sub RuleClient Certificate Name MismatchCritical
LogRhythm AI Engine Comm Manager Event 4014Sub RuleFailed To Load AIE Com Mgr TLS CertificateCritical
LogRhythm AI Engine Comm Manager Event 4013Sub RuleIPV6 Not Supported By OSError
LogRhythm Agent Event 4036Sub RuleAgent Acceptance Rejected ErrorError
LogRhythm Agent Event 10204Sub RuleRealtime File Monitor Driver ConnectedInformation
LogRhythm Agent Event 10203Sub RuleRealtime File Monitor Driver Connect FailedCritical
LogRhythm Agent Event 10202Sub RuleRealtime File Monitor Driver Start FailedCritical
LogRhythm Agent Event 10201Sub RuleRealtime File Monitor Driver StopInformation
LogRhythm Agent Event 10200Sub RuleRealtime File Monitor Driver StartInformation
LogRhythm Agent Event 10115Sub RuleFailed To Load Agent TLS CertificateCritical
LogRhythm Agent Event 10114Sub RuleServer Certificate Trusted Authority Check FailedCritical
LogRhythm Agent Event 10113Sub RuleServer Certificate Revocation Check FailedCritical
LogRhythm Agent Event 10112Sub RuleServer Certificate RequiredCritical
LogRhythm Agent Event 10111Sub RuleServer Certificate Name MismatchCritical
LogRhythm Agent Event 10110Sub RuleConfig File Write WarningWarning
LogRhythm Agent Event 10109Sub RuleLog Source Acceptance Rejected ErrorError
LogRhythm Agent Event 10108Sub RuleLog Source Acceptance Pending WarningWarning
LogRhythm Agent Event 10107Sub RuleFailed To Construct Message Source State DataError
LogRhythm Agent Event 10106Sub RuleFailed To Send Message Source State To MediatorError
LogRhythm Agent Event 10105Sub RuleFailed Software Integrity TestCritical
LogRhythm Agent Event 10104Sub RuleSNMPv3 Not Supported In FIPS ModeWarning
LogRhythm Agent Event 10103Sub RuleError Starting Log Read ThreadError
LogRhythm Agent Event 10102Sub RuleInvalid IP Address FormatError
LogRhythm Agent Event 10101Sub RuleMixed IPV4V6 Not SupportedError
LogRhythm Agent Event 10100Sub RuleIPV6 Not Supported By OSError
LogRhythm Mediator Event 10020Sub RuleClient Certificate Trusted Authority Check FailedCritical
LogRhythm Mediator Event 10019Sub RuleClient Certificate Revocation Check FailedCritical
LogRhythm Mediator Event 10018Sub RuleClient Certificate RequiredCritical
LogRhythm Mediator Event 10017Sub RuleClient Certificate Name MismatchCritical
LogRhythm Mediator Event 10016Sub RuleInvalid Agent Identification DataCritical
LogRhythm Mediator Event 10015Sub RuleFailed To Load Mediator TLS CertificateCritical
LogRhythm Mediator Event 10010Sub RuleSNMP ID Failed To Identify DeviceWarning
LogRhythm Mediator Event 10003Sub RuleFIPS Mode Windows Auth OnlyWarning
LogRhythm Mediator Event 10002Sub RuleFailed Software Integrity TestCritical
LogRhythm Mediator Event 10001Sub RuleFailed To Decrypt EMDB PasswordCritical
LogRhythm Mediator Event 10000Sub RuleIPV6 Not Supported By OSError
LogRhythm Mediator Event 9004Sub RuleFailed To Shutdown Event Insert ProcessorError
LogRhythm Mediator Event 9003Sub RuleFailed To Start Event Insert ProcessorCritical
LogRhythm Mediator Event 6010Sub RuleFailed To Validate Events DB ConnectionCritical
LogRhythm Mediator Event 6009Sub RuleFailed To Connect To Events DBCritical
LogRhythm Mediator Event 10014Sub RuleLogRhythm Mediator LST Acceptance Update ExceptionWarning
LogRhythm Mediator Event 10013Sub RuleLogRhythm Mediator LST Accept Update Thread ShtdwnError
LogRhythm Mediator Event 10012Sub RuleLogRhythm Mediator LST Acceptance Insert ExceptionWarning
LogRhythm Mediator Event 10011Sub RuleLogRhythm Mediator LST Accept Insert Thread ShtdwnError
LogRhythm Mediator Event 10008Sub RuleLogRhythm Mediator SNMP Id Thread Shutdown ErrorError
LogRhythm Mediator Event 10007Sub RuleLogRhythm Mediator SNMP Id No Such SNMP NameError
LogRhythm Mediator Event 10006Sub RuleLogRhythm Mediator SNMP Id SNMP ExceptionWarning
LogRhythm Mediator Event 10005Sub RuleLogRhythm Mediator SNMP Id Unexpected ExceptionWarning
LogRhythm Mediator Event 10004Sub RuleLogRhythm Mediator SNMP Id Maximum Attempts WarnWarning
LogRhythm ARM Event 3210Sub RuleLogRhythm ARM AutoRmdn Plugin Deployment ErrorError
LogRhythm ARM Event 3209Sub RuleLogRhythm ARM AutoRmdn Plugin Cannot Be DeployedError
LogRhythm ARM Event 3208Sub RuleLogRhythm ARM AutoRmdn Action Generation ErrorError
LogRhythm ARM Event 3207Sub RuleLogRhythm ARM AutoRmdn Action Creation ErrorError
LogRhythm ARM Event 3206Sub RuleLogRhythm ARM AutoRmdn Insert Thread Shutdown ErrError
LogRhythm ARM Event 3205Sub RuleLogRhythm ARM AutoRmdn Action Completion FailedWarning
LogRhythm ARM Event 3204Sub RuleLogRhythm ARM AutoRmdn Action Failure FailedError
LogRhythm ARM Event 3203Sub RuleLogRhythm ARM AutoRmdn Action Execution FailureWarning
LogRhythm ARM Event 3202Sub RuleLogRhythm ARM AutoRmdn Windows Could Not ExecuteError
LogRhythm ARM Event 3201Sub RuleLogRhythm ARM AutoRmdn Engine Thread Shutdown ErrError
Qualys Agent Event 21010Sub RuleUnable To Query Qualys Knowledge Base For QIDWarning
Qualys Agent Event 21005Sub RuleFailed To Parse Qualys EventError
Qualys Agent Event 21004Sub RuleError Parsing Qualys Knowledge Base For QIDError
Qualys Agent Event 21003Sub RuleError Parsing Qualys Host VulnerabilityError
Qualys Agent Event 21002Sub RuleError Parsing Qualys HostError
Qualys Agent Event 21001Sub RuleError Reading The Qualys ConfigurationError
Qualys Agent Event 21000Sub RuleProcessing List Of Qualys Host VulnerabilitiesInformation
AI Engine Data Provider StoppedSub RuleAI Engine Data Provider StoppedStartup and Shutdown
Failed To Start The AIE Data ProviderSub RuleFailed To Start AI Engine Data ProviderError
LogRhythm AIE Event 8026Sub RuleRule Suspended Runtime ErrorError
LogRhythm AIE Event 8025Sub RuleRule Suspended TriageError
LogRhythm AIE Event 9000Sub RuleUndeletable Files Remain In Data FolderWarning
LogRhythm AIE Event 8022Sub RuleFailure During Data LoadingCritical
LogRhythm AIE Event 8021Sub RuleLog Input Rate Exceeding Engine CapacityCritical
LogRhythm AIE Event 8020Sub RuleLogs Per Day Info MessageInformation
LogRhythm AIE Event 8019Sub RuleMemory Use Exceeds Hard LimitWarning
LogRhythm AIE Event 8018Sub RuleMemory Use Exceeds Soft LimitInformation
LogRhythm AIE Event 8017Sub RuleAborting ThreadWarning
LogRhythm AIE Event 8016Sub RuleFailed To Load Engine State FileError
LogRhythm AIE Event 8015Sub RuleData Block State File Not FoundError
LogRhythm AIE Event 8014Sub RuleEngine State File Not FoundError
LogRhythm AIE Event 8013Sub RuleAI Engine StoppedStartup and Shutdown
LogRhythm AIE Event 8012Sub RuleAI Engine StoppingStartup and Shutdown
LogRhythm AIE Event 8011Sub RuleUnhandled Exception Stopping AI EngineError
LogRhythm AIE Event 8010Sub RuleUnhandled Exception In AI EngineCritical
LogRhythm AIE Event 8009Sub RuleAI Engine StartedStartup and Shutdown
LogRhythm AIE Event 8024Sub RuleAI Engine StartingStartup and Shutdown
LogRhythm AIE Event 8023Sub RuleFailed To Move State FileError
LogRhythm AIE Event 8008Sub RuleFailed To Delete State FileError
LogRhythm AIE Event 8007Sub RuleRule Enabled Status ChangedInformation
LogRhythm AIE Event 8006Sub RuleRule Enabled Status ChangingOther Audit Success
LogRhythm AIE Event 8005Sub RuleFailed To Save Engine StateError
LogRhythm AIE Event 8004Sub RuleFailed To Save Data Block StateError
LogRhythm AIE Event 8002Sub RuleFailed To Restore Data Block StateWarning
LogRhythm AIE Event 8001Sub RuleNo Data Block For Engine State DataError
LogRhythm AIE Event 7027Sub RuleFailed To Write EventError
LogRhythm AIE Event 6008Sub RuleRecycling Engine ServerWarning
LogRhythm AIE Event 6003Sub RuleFailed To Validate EMDB ConnectionError
LogRhythm AIE Event 6001Sub RuleFailed To Connect To EMDBError
LogRhythm AIE Event 4002Sub RuleFailure In DataInputProviderError
LogRhythm AIE Event 4001Sub RuleFailed To Load Log Data From DiskError
LogRhythm AIE Event 2064Sub RuleFailure In Updating AIE Rule StateError
LogRhythm AIE Event 2063Sub RuleFailed To Update AIE Rules After SuspendError
LogRhythm AIE Event 2062Sub RuleFailed To Translate RuleSet To SchemaError
LogRhythm AIE Event 2061Sub RuleFailed To Find Events ParametersError
LogRhythm AIE Event 2060Sub RuleFailed To Start AI EngineError
LogRhythm AIE Event 2044Sub RuleEngine Thread Join TimeoutError
LogRhythm AIE Event 2043Sub RuleMaintenance Thread Join TimeoutWarning
LogRhythm AIE Event 2042Sub RuleMain Thread Join TimeoutError
LogRhythm AIE Event 2041Sub RuleAIE Shutdown TimeoutError
LogRhythm AIE Event 2030Sub RuleFailed To Setup Performance CounterError
LogRhythm AIE Event 2027Sub RuleInvalid AIE Server LicenseError
LogRhythm AIE Event 2024Sub RuleFailed To Set Service RecoveryError
LogRhythm AIE Event 2021Sub RuleFailed To Find EMDB ParametersError
LogRhythm AIE Event 2008Sub RuleError In Maintenance ThreadError
LogRhythm AIE Event 2007Sub RuleFatal Error In Maintenance ThreadError
LogRhythm AIE Event 2006Sub RuleFailed To Load Engine SchemaError
LogRhythm AIE Event 2005Sub RuleFailed To Load Schema AssemblyError
LogRhythm AIE Event 2003Sub RuleFailed To Open Or Read Local ConfigError
LogRhythm AIE Event 2002Sub RuleFailed To Find Local ConfigError
LogRhythm AIE Event 2001Sub RuleFailed To Start Main ThreadError
LogRhythm AIE Event 1004Sub RuleService Shutdown FailureError
LogRhythm AIE Event 1003Sub RuleService Start FailureError
LogRhythm AIE Event 1002Sub RuleService ShutdownStartup and Shutdown
LogRhythm AIE Event 1001Sub RuleService StartStartup and Shutdown
LogRhythm AIEDR Event 4012Sub RuleFailed To Send Config Change Message To AIEDPError
LogRhythm AIEDR Event 4011Sub RuleFailed To Send Disconnect Message To AIEDPError
LogRhythm AIEDR Event 4010Sub RuleFailed To Close Socket ConnectionError
LogRhythm AIEDR Event 4009Sub RuleListening Thread Join TimeoutError
LogRhythm AIEDR Event 4008Sub RuleMGMT Connection Not Found In Connection TableError
LogRhythm AIEDR Event 4007Sub RuleAIEDP Not FoundError
LogRhythm AIEDR Event 4006Sub RuleReceived Data Connect Req From Unauth End PointError
LogRhythm AIEDR Event 4005Sub RuleReceived Connect Request From Unauthor End PointError
LogRhythm AIEDR Event 4004Sub RuleFailed To Create AIEDR SSL CertificateError
LogRhythm AIEDR Event 4003Sub RuleNo Valid AIEDR ID FoundError
LogRhythm AIEDR Event 4002Sub RuleFailed To Send Resume Message To AIEDPError
LogRhythm AIEDR Event 4001Sub RuleFailed To Send Pause Message To AIEDPError
LogRhythm AIEDR Event 4000Sub RuleData Connection Not Found In Connections TableError
LogRhythm AIEDR Event 3022Sub RuleFailed To Set One Or More Socket OptionsError
LogRhythm AIEDR Event 3021Sub RuleFailed To Write Data Message To FileError
LogRhythm AIEDR Event 3020Sub RuleFailed Asynchronous Data Message Payload ReadError
LogRhythm AIEDR Event 3019Sub RuleFailed Asynchronous MGMT Message Payload ReadError
LogRhythm AIEDR Event 3018Sub RuleError Reading Data Message HeaderError
LogRhythm AIEDR Event 3017Sub RuleError Reading Management Message HeaderError
LogRhythm AIEDR Event 3016Sub RuleFailed To Complete Asynchronous Data Payload ReadError
LogRhythm AIEDR Event 3015Sub RuleFailed To Complete Asynchronous MGNT Payload ReadError
LogRhythm AIEDR Event 3014Sub RuleFailed To Handle New Data ConnectionError
LogRhythm AIEDR Event 3013Sub RuleFailed To Begin Asynchronous Data Socket ReceiveError
LogRhythm AIEDR Event 3012Sub RuleInvalid Message CodeError
LogRhythm AIEDR Event 3011Sub RuleInvalid Message Protocol VersionError
LogRhythm AIEDR Event 3010Sub RuleMessage Payload Size Exceeded Buffer SizeError
LogRhythm AIEDR Event 3009Sub RuleFailed To Handle New Management ConnectionError
LogRhythm AIEDR Event 3008Sub RuleFailed To Begin Asynchronous MGMT Socket ReceiveError
LogRhythm AIEDR Event 3007Sub RuleConnection Authentication FailedAuthentication Failure
LogRhythm AIEDR Event 3006Sub RuleThe Connection Limit Has Been ReachedError
LogRhythm AIEDR Event 3005Sub RuleFailed To Accept Data Socket ConnectionError
LogRhythm AIEDR Event 3004Sub RuleFailed To Listen For Data ConnectionsError
LogRhythm AIEDR Event 3003Sub RuleFailed To Bind To The Data SocketError
LogRhythm AIEDR Event 3002Sub RuleFailed To Accept Management Socket ConnectionError
LogRhythm AIEDR Event 3001Sub RuleFailed To Listen For Management Socket ConnectionsError
LogRhythm AIEDR Event 3000Sub RuleFailed To Bind To The Management SocketError
LogRhythm AIEDR Event 2004Sub RulePurged AIEDR Log Data File(s)Warning
LogRhythm AIEDR Event 2003Sub RuleFailed To Purge AIEDR Log Data File(s)Error
LogRhythm AIEDR Event 2002Sub RuleFailed To Start The Processing ThreadError
LogRhythm AIEDR Event 2001Sub RuleFailed To Rotate Or Purge AIEDR Log File(s)Error
LogRhythm AIEDR Event 2000Sub RuleFailed To Open Or Read Local ConfigError
LogRhythm AIEDR Event 2006Sub RuleFailed To Set Up One Or More Performance CountersError
LogRhythm AIEDR Event 1002Sub RuleThe AIEDR Service Has StoppedStartup and Shutdown
LogRhythm AIEDR Event 1001Sub RuleThe AIEDR Service Has StartedStartup and Shutdown
LogRhythm AIEDP Event 4024Sub RulePurged Spooled Data FileError
LogRhythm AIEDP Event 4023Sub RuleUnknown Log Type In Log Data QueueError
LogRhythm AIEDP Event 4022Sub RuleFailed To Delete Suspense FileError
LogRhythm AIEDP Event 4021Sub RuleFailed To Send Data To AIEDRError
LogRhythm AIEDP Event 4020Sub RuleLog Data Flush Exited Early : Data Delivery ErrorError
LogRhythm AIEDP Event 4019Sub RuleFailed To Setup Log Data TransferError
LogRhythm AIEDP Event 4018Sub RuleFailed To Dequeue Log DataError
LogRhythm AIEDP Event 4017Sub RuleFailed To Send Disconnect Message To AIEDRError
LogRhythm AIEDP Event 4016Sub RuleFailed To Complete Comm - Broken ConnectionError
LogRhythm AIEDP Event 4015Sub RuleManagement Payload Size Exceeded Buffer SizeError
LogRhythm AIEDP Event 4014Sub RuleFailed To Complete Comm - Broken ConnectionError
LogRhythm AIEDP Event 4013Sub RuleFailed To Retrieve AIEDP ID From Event Manager DBError
LogRhythm AIEDP Event 4012Sub RuleNo Valid AIEDP ID FoundError
LogRhythm AIEDP Event 4011Sub RuleReceived Resume Service RequestInformation
LogRhythm AIEDP Event 4010Sub RuleReceived Pause Service RequestInformation
LogRhythm AIEDP Event 4009Sub RuleReceived Service Restart Service RequestInformation
LogRhythm AIEDP Event 4008Sub RuleReceived Service Stop Service RequestInformation
LogRhythm AIEDP Event 4007Sub RuleReceived Configuration Change Service RequestInformation
LogRhythm AIEDP Event 4006Sub RuleFailed To Send Log To AIEDR Due To Broken ConnecError
LogRhythm AIEDP Event 4005Sub RuleFailed To Construct Log Data MessageError
LogRhythm AIEDP Event 4004Sub RuleFailed To Send Heartbeat To AIEDRError
LogRhythm AIEDP Event 4003Sub RuleCommunication Inturrpted Broken ConnectionError
LogRhythm AIEDP Event 4002Sub RuleInvalid Message Header - Closing ConnectionError
LogRhythm AIEDP Event 4001Sub RuleFailed To Send Identification To AIEDRError
LogRhythm AIEDP Event 4000Sub RuleFailed To Purge Spooled Data FileError
LogRhythm AIEDP Event 3005Sub RuleFailed Connection Attempt To AIEDPWarning
LogRhythm AIEDP Event 3004Sub RuleFailed To Bind Local SocketError
LogRhythm AIEDP Event 3003Sub RuleFailed To Set One Or More Socket OptionsError
LogRhythm AIEDP Event 3002Sub RuleThe Specified IP Endpoint Is InvalidError
LogRhythm AIEDP Event 3001Sub RuleFailed To Parse The Specified IP AddressError
LogRhythm AIEDP Event 3000Sub RuleFailed To Close Previously Used SocketError
LogRhythm AIEDP Event 2005Sub RuleNo Valid AIEDRs ConfiguredError
LogRhythm AIEDP Event 2004Sub RuleMax Queue Exceeded - Writing Incoming Logs To DiskWarning
LogRhythm AIEDP Event 2003Sub RuleFailed To Rotate Or Purge AIEDP Log File(s)Error
LogRhythm AIEDP Event 2002Sub RuleFailed To Start The Maintenance ThreadError
LogRhythm AIEDP Event 2001Sub RuleFailed To Start The Processing ThreadError
LogRhythm AIEDP Event 2000Sub RuleThe AIEDP Service Has StartedStartup and Shutdown
LogRhythm AIEDP Event 1004Sub RuleAIEDP Couldnt Find Its Config File (lraiedp.ini)Error
LogRhythm AIEDP Event 1003Sub RuleAIEDP Couldnt Find Its Config File (lraiedp.ini)Error
LogRhythm AIEDP Event 1002Sub RuleAn Error Occurred During MaintenanceError
LogRhythm AIEDP Event 1001Sub RuleFailed To Set Up One Or More Performance CountersError
LogRhythm AIEDP Event 1000Sub RuleFailed To Initialize The Log Data QueueError
LogRhythm Agent Event 1012Sub RuleLogRhythm Agent NCM StartingInformation
LogRhythm Agent Event 1011Sub RuleLogRhythm Agent Process Monitor StoppedInformation
LogRhythm Agent Event 1010Sub RuleLogRhythm Agent Process Monitor StoppingInformation
LogRhythm Agent Event 1009Sub RuleLogRhythm Agent Process Monitor StartedInformation
LogRhythm Agent Event 1008Sub RuleLogRhythm Agent Process Monitor StartingInformation
LogRhythm Agent Event 1007Sub RuleLogRhythm Agent Bad Log InterfaceError
LogRhythm Agent Event 1006Sub RuleLogRhythm Agent FIPS ModeInformation
LogRhythm Agent Event 10021Sub RuleLogRhythm Agent General Processing ErrorError
LogRhythm Agent Event 10020Sub RuleLogRhythm Agent NCM Read Data ErrorError
LogRhythm Agent Event 10019Sub RuleLogRhythm Agent Process Monitor Read Data ErrorError
LogRhythm Agent Event 10018Sub RuleLogRhythm Agent NCM Write Data ErrorError
LogRhythm Agent Event 10017Sub RuleLogRhythm Agent Process Monitor Write Data ErrorError
LogRhythm Agent Event 10016Sub RuleLogRhythm Agent NCM Thread ErrorError
LogRhythm Agent Event 10015Sub RuleLogRhythm Agent Network Connection Mon Start ErrorError
LogRhythm Agent Event 10014Sub RuleLogRhythm Agent Process Monitor Thread ErrorError
LogRhythm Agent Event 10013Sub RuleLogRhythm Agent Process Monitor Start ErrorError
LogRhythm Agent Event 6016Sub RuleLogRhythm Agent DLD Drive Eject ErrorError
LogRhythm Agent Event 5050Sub RuleLogRhythm Agent Failed To Send Virtl Src RequestInformation
LogRhythm Agent Event 5049Sub RuleLogRhythm Agent Failed To Loc Oldest Unproc FileInformation
LogRhythm Agent Event 5048Sub RuleLogRhythm Agent Syslog Svr Fail Read Syslog SuspInformation
LogRhythm Agent Event 5047Sub RuleLogRhythm Agent Syslog Svr Fail Open Unproc FileInformation
LogRhythm Agent Event 5046Sub RuleLogRhythm Agent Syslog Svr Fail Read Unproc FileInformation
LogRhythm Agent Event 5045Sub RuleLogRhythm Agent Syslog Svr Fail Obtain Virt Src IdInformation
LogRhythm Agent Event 5044Sub RuleLogRhythm Agent Syslog Svr Fail Res Virt Src IdInformation
LogRhythm Agent Event 5043Sub RuleLogRhythm Agent Syslog Server ShutdownInformation
LogRhythm Agent Event 5042Sub RuleLogRhythm Agent Syslog Error Loading RegexError
LogRhythm Agent Event 5041Sub RuleLogRhythm Agent Syslog Error Loading Host ListError
LogRhythm Agent Event 5040Sub RuleLogRhythm Agent Syslog Server Stopped UDP ReadInformation
LogRhythm Agent Event 5039Sub RuleLogRhythm Agent Syslog Server Starting UDP ReadInformation
LogRhythm Agent Event 5038Sub RuleLogRhythm Agent Syslog Svr Started UDP ProcessorInformation
LogRhythm Agent Event 5037Sub RuleLogRhythm Agent Syslog Svr Starting UDP ProcessorInformation
LogRhythm Agent Event 5036Sub RuleLogRhythm Agent Syslog Server UDP Socket BoundInformation
LogRhythm Agent Event 5035Sub RuleLogRhythm Agent Syslog Svr Fail Get UDP Skt NameInformation
LogRhythm Agent Event 5034Sub RuleLogRhythm Agent Syslog Svr Failed Create TCP SktInformation
LogRhythm Agent Event 5033Sub RuleLogRhythm Agent Syslog Server Stopped TCP ReadInformation
LogRhythm Agent Event 5032Sub RuleLogRhythm Agent Syslog Svr Starting TCP ProcessorInformation
LogRhythm Agent Event 5031Sub RuleLogRhythm Agent Syslog Svr Failed Create UDP SktInformation
LogRhythm Agent Event 5030Sub RuleLogRhythm Agent Syslog Svr Fail Listen On TCP SktInformation
LogRhythm Agent Event 5029Sub RuleLogRhythm Agent Syslog Server TCP Socket BoundInformation
LogRhythm Agent Event 5028Sub RuleLogRhythm Agent Syslog Server StartingInformation
LogRhythm Agent Event 5027Sub RuleLogRhythm Agent Syslog Server InitializingInformation
LogRhythm Agent Event 5026Sub RuleLogRhythm Agent Syslog Server StoppedInformation
LogRhythm Agent Event 5025Sub RuleLogRhythm Agent Syslog Server StoppingInformation
LogRhythm Agent Event 5024Sub RuleLogRhythm Agent Syslog Server StartedInformation
LogRhythm Agent Event 5023Sub RuleLogRhythm Agent Syslog Server StartingInformation
LogRhythm Agent Event 1016Sub RuleLogRhythm Agent User Activity Monitor ErrorInformation
LogRhythm Agent Event 1015Sub RuleLogRhythm Agent Network Connection Monitor StoppedInformation
LogRhythm Agent Event 1014Sub RuleLogRhythm Agent Network Connect Monitor StoppingInformation
LogRhythm Agent Event 1013Sub RuleLogRhythm Agent Network Connection Monitor StartedInformation
LogRhythm MPE Event 2050Sub RuleLogRhythm MPE Rule Performing PoorlyWarning
LogRhythm Agent Event 10012Sub RuleLogRhythm Agent SNMP Trap Rcvr Encryption ErrorError
LogRhythm Agent Event 10011Sub RuleLogRhythm Agent SNMP Trap Rcvr Auth ErrorError
LogRhythm Agent Event 10010Sub RuleLogRhythm Agent SNMP Trap Receiver ErrorError
LogRhythm Agent Event 10009Sub RuleLogRhythm Agent SNMP Trap Receiver Bad PacketError
LogRhythm Agent Event 10008Sub RuleLogRhythm Agent SNMP Trap Receiver OID Not FoundWarning
LogRhythm Agent Event 10007Sub RuleLogRhythm Agent SNMP Trap Rcvr Processing FailureError
LogRhythm Agent Event 10006Sub RuleLogRhythm Agent SNMP Trap Rcvr File Open FailedError
LogRhythm Agent Event 10005Sub RuleLogRhythm Agent SNMP Trap Rcvr File Delete FailError
LogRhythm Agent Event 10004Sub RuleLogRhythm Agent SNMP Trap Receiver File Not FoundError
LogRhythm Agent Event 10003Sub RuleLogRhythm Agent SNMP Trap Rcvr Socket Bind FailError
LogRhythm Agent Event 10002Sub RuleLogRhythm Agent SNMP Trap Receiver Bad IP AddressError
LogRhythm Agent Event 10001Sub RuleLogRhythm Agent SNMP Trap Receiver Missing AddressWarning
LogRhythm Agent Event 10000Sub RuleLogRhythm Agent SNMP Trap Receiver ErrorError
LogRhythm Job Manager ErrorSub RuleGeneral LogRhythm Job Manager ErrorError
LogRhythm Job Manager WarningSub RuleGeneral LogRhythm Job Manager WarningWarning
LogRhythm Job Manager InformationSub RuleGeneral LogRhythm Job Manager InformationInformation
LogRhythm ARM ErrorSub RuleGeneral LogRhythm ARM ErrorError
LogRhythm ARM WarningSub RuleGeneral LogRhythm ARM WarningWarning
LogRhythm ARM InformationSub RuleGeneral LogRhythm ARM InformationInformation
LogRhythm MPE ErrorSub RuleGeneral LogRhythm MPE ErrorError
LogRhythm MPE WarningSub RuleGeneral LogRhythm MPE WarningWarning
LogRhythm MPE InformationSub RuleGeneral LogRhythm MPE InformationInformation
LogRhythm Mediator ErrorSub RuleGeneral LogRhythm Mediator ErrorError
LogRhythm Mediator WarningSub RuleGeneral LogRhythm Mediator WarningWarning
LogRhythm Mediator InformationSub RuleGeneral LogRhythm Mediator InformationInformation
LogRhythm Agent ErrorSub RuleGeneral LogRhythm Agent ErrorError
LogRhythm Agent WarningSub RuleGeneral LogRhythm Agent WarningWarning
LogRhythm Agent InformationSub RuleGeneral LogRhythm Agent InformationInformation
LogRhythm MPE Event 2049Sub RuleLogRhythm MPE GLPR Processing ErrorError
LogRhythm MPE Event 2048Sub RuleLogRhythm MPE GLPR Preparation ErrorError
LogRhythm MPE Event 2047Sub RuleLogRhythm MPE GLPR Collection Update ErrorError
LogRhythm MPE Event 2046Sub RuleLogRhythm MPE Global Data Mgmt Settings ErrorError
LogRhythm Mediator Event 9002Sub RuleLogRhythm Mediator Failed Shutdown Msg Insert ProcError
LogRhythm Mediator Event 9001Sub RuleLogRhythm Mediator Failed To Start Msg Insert ProcError
LogRhythm Mediator Event 2059Sub RuleLogRhythm Mediator Failed To Get Mediator IDError
LogRhythm Mediator Event 2058Sub RuleLogRhythm Mediator Failed To Open Config FileError
LogRhythm Job Manager Event 6004Sub RuleLogRhythm JobMgr AD Synch AbortWarning
LogRhythm Job Manager Event 6003Sub RuleLogRhythm JobMgr AD Synch ErrorError
LogRhythm Job Manager Event 6002Sub RuleLogRhythm JobMgr AD Synch CompletedInformation
LogRhythm Job Manager Event 6001Sub RuleLogRhythm JobMgr AD Synch StartedInformation
LogRhythm Job Manager Event 5016Sub RuleLogRhythm JobMgr HbMon Error Query LS Last Log InfError
LogRhythm Job Manager Event 5015Sub RuleLogRhythm JobMgr HbMon Log Source State Deser ErrError
LogRhythm Job Manager Event 5014Sub RuleLogRhythm JobMgr HbMon Log Source State Ser ErrorError
LogRhythm Job Manager Event 5013Sub RuleLogRhythm JobMgr HbMon Missing LS State FileWarning
LogRhythm Job Manager Event 5012Sub RuleLogRhythm JobMgr HbMon Missing Agent State FileWarning
LogRhythm Job Manager Event 5011Sub RuleLogRhythm JobMgr HbMon Missing Mediator State FileWarning
LogRhythm Job Manager Event 5010Sub RuleLogRhythm JobMgr HbMon Error Writing HB EventError
LogRhythm Job Manager Event 5009Sub RuleLogRhythm JobMgr HbMon Error Query Agent HB InfoError
LogRhythm Job Manager Event 5008Sub RuleLogRhythm JobMgr HbMon Error Query Med HB InfoError
LogRhythm Job Manager Event 5007Sub RuleLogRhythm JobMgr HbMon Error Loading Common EventsError
LogRhythm Job Manager Event 5006Sub RuleLogRhythm JobMgr HbMon Agent State Deser ErrorError
LogRhythm Job Manager Event 5005Sub RuleLogRhythm JobMgr HbMon Mediator State Deser ErrorError
LogRhythm Job Manager Event 5004Sub RuleLogRhythm JobMgr HbMon Agent State Ser ErrorError
LogRhythm Job Manager Event 5003Sub RuleLogRhythm JobMgr HbMon Mediator State Ser ErrorError
LogRhythm Job Manager Event 5002Sub RuleLogRhythm JobMgr HbMon ShutdownInformation
LogRhythm Job Manager Event 5001Sub RuleLogRhythm JobMgr HbMon StartedInformation
LogRhythm ARM Event 9999Sub RuleLogRhythm ARM Unexpected ErrorError
LogRhythm ARM Event 2017Sub RuleLogRhythm ARM Alarm Rule Conversion ErrorError
LogRhythm ARM Event 2016Sub RuleLogRhythm ARM Max Memory ReachedError
LogRhythm ARM Event 1007Sub RuleLogRhythm ARM Configuration Update ErrorError
LogRhythm Agent Event 6015Sub RuleLogRhythm Agent DLD IMAPI Service ErrorWarning
LogRhythm Agent Event 6014Sub RuleLogRhythm Agent DLD File Watch ErrorError
LogRhythm Agent Event 6013Sub RuleLogRhythm Agent Failed To Start DLD ThreadError
LogRhythm Agent Event 6012Sub RuleLogRhythm Agent Failed To Start Data Loss DefenderError
LogRhythm Agent Event 2062Sub RuleLogRhythm Agent Missing Path ParameterError
LogRhythm Job Manager Event 1007Sub RuleLogRhythm Job Manager Config Update ErrorError
LogRhythm Job Manager Event 9999Sub RuleLogRhythm Job Manager Unexpected ErrorError
LogRhythm Job Manager Event 4007Sub RuleLogRhythm Job Manager Scheduled Rpt Unexpected ErrError
LogRhythm Job Manager Event 4006Sub RuleLogRhythm Job Manager Scheduled Rpt Email ErrorError
LogRhythm Job Manager Event 4005Sub RuleLogRhythm Job Manager Scheduled Rpt Export ErrorError
LogRhythm Job Manager Event 4004Sub RuleLogRhythm Job Manager Scheduled Rpt Prep ErrorError
LogRhythm Job Manager Event 4003Sub RuleLogRhythm Job Manager Scheduled Rpt Pkg FailureError
LogRhythm Job Manager Event 4002Sub RuleLogRhythm Job Manager Scheduled Rpt Job FailureError
LogRhythm Job Manager Event 4001Sub RuleLogRhythm Job Manager Scheduled Rpt Init ErrorError
LogRhythm Job Manager Event 2016Sub RuleLogRhythm Job Manager Memory RecycleWarning
LogRhythm Job Manager Event 2004Sub RuleLogRhythm Job Manager Maintenance ErrorError
LogRhythm Job Manager Event 1006Sub RuleLogRhythm Job Manager Shutdown InitiatedInformation
LogRhythm Job Manager Event 1005Sub RuleLogRhythm Job Manager Startup InitiatedInformation
LogRhythm Job Manager Event 1004Sub RuleLogRhythm Job Manager Shutdown FailureError
LogRhythm Job Manager Event 1003Sub RuleLogRhythm Job Manager Startup FailureCritical
LogRhythm Job Manager Event 1002Sub RuleLogRhythm Job Manager StoppedInformation
LogRhythm Job Manager Event 1001Sub RuleLogRhythm Job Manager StartedInformation
LogRhythm Mediator Event 8025Sub RuleLogRhythm Mediator Failed To Quarantine ArchiveError
LogRhythm Mediator Event 8024Sub RuleLogRhythm Mediator Active Archive Seal ErrorError
LogRhythm Mediator Event 8023Sub RuleLogRhythm Mediator Active Archive Update ErrorError
LogRhythm Mediator Event 8022Sub RuleLogRhythm Mediator Archive Verification FailureWarning
LogRhythm Mediator Event 8021Sub RuleLogRhythm Mediator Archive Verification ErrorError
LogRhythm Mediator Event 7026Sub RuleLogRhythm Mediator Shutdown Reply Send ErrorError
LogRhythm Mediator Event 7025Sub RuleLogRhythm Mediator Message Source Auth ErrorError
LogRhythm Mediator Event 7024Sub RuleLogRhythm Mediator No Agent ConfigurationError
LogRhythm Mediator Event 7023Sub RuleLogRhythm Mediator Unregistered Agent ErrorWarning
LogRhythm Mediator Event 7022Sub RuleLogRhythm Mediator Service Request Send ErrorError
LogRhythm Mediator Event 6008Sub RuleLogRhythm Mediator Recycling Service ProcessError
LogRhythm Mediator Event 3021Sub RuleLogRhythm Mediator Agent SSL Auth FailedError
LogRhythm Mediator Event 3020Sub RuleLogRhythm Mediator Agent Name ConflictError
LogRhythm Mediator Event 2057Sub RuleLogRhythm Mediator Failed To Create Svr SSL CertWarning
LogRhythm Mediator Event 2056Sub RuleLogRhythm Mediator Using Default Server SSL PortWarning
LogRhythm Agent Event 5022Sub RuleLogRhythm Agent Syslogng Socket Option FailedWarning
LogRhythm Agent Event 5021Sub RuleLogRhythm Agent Syslogng File Delete FailedWarning
LogRhythm Agent Event 5020Sub RuleLogRhythm Agent Syslogng File Open FailedWarning
LogRhythm Agent Event 5019Sub RuleLogRhythm Agent Syslogng File Not FoundWarning
LogRhythm Agent Event 5018Sub RuleLogRhythm Agent Syslogng Read Begin FailureWarning
LogRhythm Agent Event 5017Sub RuleLogRhythm Agent Syslogng Read Complete FailureWarning
LogRhythm Agent Event 5016Sub RuleLogRhythm Agent Syslogng Connection FailureWarning
LogRhythm Agent Event 5015Sub RuleLogRhythm Agent Syslogng Processing FailureWarning
LogRhythm Agent Event 5014Sub RuleLogRhythm Agent Syslogng Extraction FailureWarning
LogRhythm Agent Event 5013Sub RuleLogRhythm Agent Syslogng Reader Thread FailureWarning
LogRhythm Agent Event 5012Sub RuleLogRhythm Agent Syslogng Socket Bind FailureWarning
LogRhythm Agent Event 5011Sub RuleLogRhythm Agent Syslogng Server Start FailureWarning
LogRhythm Agent Event 4034Sub RuleLogRhythm Agent Failed To Check Mediator ShutdownError
LogRhythm Agent Event 4033Sub RuleLogRhythm Agent Upgrade Service RequestError
LogRhythm Agent Event 4032Sub RuleLogRhythm Agent Resume Service RequestError
LogRhythm Agent Event 4031Sub RuleLogRhythm Agent Restart Service RequestInformation
LogRhythm Agent Event 4030Sub RuleReceived Service Restart Service RequestInformation
LogRhythm Agent Event 4029Sub RuleLogRhythm Agent Stop Service RequestError
LogRhythm Agent Event 4028Sub RuleLogRhythm Agent Config Change Service RequestInformation
LogRhythm Agent Event 4027Sub RuleLogRhythm Agent Pre-existing Connection ErrorError
LogRhythm Agent Event 4026Sub RuleLogRhythm Agent No Configuration ErrorError
LogRhythm Agent Event 4025Sub RuleLogRhythm Agent Unregistered Agent ErrorError
LogRhythm Agent Event 2061Sub RuleLogRhythm Agent No Log Manager ConfiguredError
LogRhythm Agent Event 2060Sub RuleLogRhythm Agent No Log Manager ConfiguredError
LogRhythm Agent Event 1005Sub RuleLogRhythm Agent RecyclingInformation
LogRhythm MPE Event 2045Sub RuleLogRhythm MPE Maintenance ThreadLock TimeoutWarning
LogRhythm MPE Event 2044Sub RuleLogRhythm MPE Log Processing Thread Shutdown ErrorError
LogRhythm MPE Event 2043Sub RuleLogRhythm MPE Diagnostics Processing ErrorError
LogRhythm MPE Event 2042Sub RuleLogRhythm MPE Log Processing Thread Start ErrorError
LogRhythm ARM Event 3102Sub RuleLogRhythm ARM SNMP Trap Was Not SentError
LogRhythm ARM Event 3101Sub RuleLogRhythm ARM SNMP Trap Send ErrorWarning
LogRhythm Agent Event 9003Sub RuleLogRhythm Agent Checkpoint Stop Collection ErrorError
LogRhythm Agent Event 9002Sub RuleLogRhythm Agent Checkpoint Stop Collection ErrorError
LogRhythm Agent Event 9001Sub RuleLogRhythm Agent Checkpoint Start Collection ErrorError
LogRhythm Agent Event 8002Sub RuleLogRhythm Agent Failed To Obtain IdentifierError
LogRhythm Agent Event 8001Sub RuleLogRhythm Agent Failed Virtual Source LookupWarning
LogRhythm Agent Event 4024Sub RuleLogRhythm Agent VirtSrc Info Reply Constr FailedError
LogRhythm Agent Event 4023Sub RuleLogRhythm Agent VirtSrc Info Req Send FailureError
LogRhythm Agent Event 4022Sub RuleLogRhythm Agent VirtSrc Info Req Constr FailedError
LogRhythm MPE Event 5105Sub RuleLogRhythm MPE LogMart Abort On ShutdownError
LogRhythm MPE Event 5104Sub RuleLogRhythm MPE LogMart Update ErrorError
LogRhythm MPE Event 5103Sub RuleLogRhythm MPE LogMart Serialization ErrorError
LogRhythm MPE Event 5102Sub RuleLogRhythm MPE LogMart Deserialization ErrorError
LogRhythm MPE Event 5101Sub RuleLogRhythm MPE LogMart No State FileWarning
LogRhythm MPE Event 5001Sub RuleLogRhythm MPE LogMart Initialization ErrorCritical
LogRhythm MPE Event 4107Sub RuleLogRhythm MPE Stats Abort On ShutdownError
LogRhythm ARM Event 2015Sub RuleLogRhythm ARM Error Loading Alarm RuleError
LogRhythm Mediator Event 7021Sub RuleLogRhythm Mediator Failed VirtSrc RegistrationError
LogRhythm Mediator Event 6007Sub RuleLogRhythm Mediator Database Capacity ErrorError
LogRhythm Mediator Event 6006Sub RuleLogRhythm Mediator Database Capacity WarningWarning
LogRhythm Mediator Event 2055Sub RuleLogRhythm Mediator Failed To Poll For Maint StatusWarning
LogRhythm Mediator Event 2054Sub RuleLogRhythm Mediator Virt. Source Auto Register OnInformation
LogRhythm Mediator Event 2018Sub RuleLogRhythm Mediator Bad Inactive CountWarning
LogRhythm Agent Event 2042Sub RuleLogRhythm Agent Failed To Parse Date Format FileError
LogRhythm Agent Event 2026Sub RuleLogRhythm Agent Missing Log Source NameWarning
LogRhythm Mediator Event 2023Sub RuleLogRhythm Mediator ID Retrieval FailureError
LogRhythm Mediator Event 8001Sub RuleLogRhythm Mediator Script Start FailureError
LogRhythm Agent Event 2045Sub RuleLogRhythm Agent Serialized Log Data Read FailureError
LogRhythm Mediator Event 7009Sub RuleLogRhythm Mediator Auth Success Send ErrorError
LogRhythm Mediator Event 4012Sub RuleLogRhythm Mediator Closed Agent ConnectionsWarning
LogRhythm Mediator Event 2026Sub RuleLogRhythm Mediator License Retrieval FailureError
LogRhythm Mediator Event 8004Sub RuleLogRhythm Mediator Archive Dir ErrorError
LogRhythm ARM Event 5012Sub RuleLogRhythm ARM HbMon Missing Agent State FileWarning
LogRhythm Agent Event 4004Sub RuleLogRhythm Agent Failed AuthenticationError
LogRhythm Mediator Event 3016Sub RuleLogRhythm Mediator Remote Endpoint ErrorError
LogRhythm Mediator Event 2031Sub RuleLogRhythm Mediator MPE Startup FailureCritical
LogRhythm Agent Event 2057Sub RuleLogRhythm Agent Failed Custom Command ExecError
LogRhythm Agent Event 2002Sub RuleLogRhythm Agent Failed To Start Maint TimerError
LogRhythm MPE Event 2001Sub RuleLogRhythm MPE Processing Thread AbortError
LogRhythm ARM Event 5008Sub RuleLogRhythm ARM Err Querying Mediator HB InfoError
LogRhythm Mediator Event 4017Sub RuleLogRhythm Mediator Queue Processor Status ErrorWarning
LogRhythm Agent Event 2018Sub RuleLogRhythm Agent Bad Flush BatchWarning
LogRhythm Agent Event 2017Sub RuleLogRhythm Agent Bad Local Log LifetimeWarning
LogRhythm MPE Event 2014Sub RuleLogRhythm MPE Get Spooled Event Files List ErrorError
LogRhythm Mediator Event 7018Sub RuleLogRhythm Mediator Log Data Extraction FailureError
LogRhythm MPE Event 4101Sub RuleLogRhythm MPE Stats No State FileInformation
LogRhythm MPE Event 2022Sub RuleLogRhythm MPE Error Loading Spooled Log FileError
LogRhythm Agent Event 4002Sub RuleLogRhythm Agent Sync Header Read FailureError
LogRhythm ARM Event 5001Sub RuleLogRhythm ARM HbMon StartedInformation
LogRhythm Agent Event 1001Sub RuleLogRhythm Agent StartedInformation
LogRhythm MPE Event 4104Sub RuleLogRhythm MPE Stats Update ErrorError
LogRhythm Mediator Event 4014Sub RuleLogRhythm Mediator Queue Processor Abort ErrorWarning
LogRhythm Mediator Event 2020Sub RuleLogRhythm Mediator Bad Queue ThreadsWarning
LogRhythm Agent Event 4017Sub RuleLogRhythm Agent Heartbeat Send FailureError
LogRhythm Mediator Event 6004Sub RuleLogRhythm Mediator DP Connection Validation ErrorError
LogRhythm Agent Event 2046Sub RuleLogRhythm Agent Log Rotation ErrorError
LogRhythm MPE Event 2005Sub RuleLogRhythm MPE Error Requeuing Processed LogsError
LogRhythm Mediator Event 2027Sub RuleLogRhythm Mediator Invalid LicenseError
LogRhythm Mediator Event 8005Sub RuleLogRhythm Mediator Archive Min/Max ErrorError
LogRhythm Mediator Event 4006Sub RuleLogRhythm Mediator Queue Processor Conn FailureError
LogRhythm Agent Event 4005Sub RuleLogRhythm Agent Data Processor UnavailableWarning
LogRhythm Agent Event 4018Sub RuleLogRhythm Agent Shutdown Send FailureWarning
LogRhythm ARM Event 5004Sub RuleLogRhythm ARM HbMon Agent State To Disk ErrorError
LogRhythm Mediator Event 7002Sub RuleLogRhythm Mediator Unknown Agent ErrorError
LogRhythm Agent Event 4013Sub RuleLogRhythm Agent MS Auth Send FailureError
LogRhythm Agent Event 2003Sub RuleLogRhythm Agent Failed To Start Process ThreadError
LogRhythm Agent Event 5002Sub RuleLogRhythm Agent Syslog File Not FoundError
LogRhythm Mediator Event 2035Sub RuleLogRhythm Mediator Message Source Read FailureError
LogRhythm Agent Event 4012Sub RuleLogRhythm Agent MS Auth Construction FailedError
LogRhythm MPE Event 2040Sub RuleLogRhythm MPE Diagnostic Rule Update ErrorError
LogRhythm Agent Event 3004Sub RuleLogRhythm Agent Socket Option FailureError
LogRhythm Agent Event 2059Sub RuleLogRhythm Agent Bad Syslog Server ParameterError
LogRhythm Mediator Event 4013Sub RuleLogRhythm Mediator Queue Processor Bad StateWarning
LogRhythm Mediator Event 3019Sub RuleLogRhythm Mediator Invalid Connection ClosedWarning
LogRhythm ARM Event 5007Sub RuleLogRhythm ARM HbMon Error Loading Common EventsError
LogRhythm Mediator Event 7019Sub RuleLogRhythm Mediator Log Data Parsing FailureError
LogRhythm MPE Event 2030Sub RuleLogRhythm MPE Shutdown During InitializationWarning
LogRhythm MPE Event 2016Sub RuleLogRhythm MPE Spooled Events Requeing ErrorError
LogRhythm Agent Event 7003Sub RuleLogRhythm Agent Log Read FailureError
LogRhythm MPE Event 4105Sub RuleLogRhythm MPE Stats Mediator Heartbeat ErrorError
LogRhythm Mediator Event 2021Sub RuleLogRhythm Mediator Bad Platform Manager DataError
LogRhythm Mediator Event 4002Sub RuleLogRhythm Mediator Unprocessed Log Read ErrorError
LogRhythm Agent Event 7006Sub RuleLogRhythm Agent Log Source Close FailedWarning
LogRhythm Mediator Event 3017Sub RuleLogRhythm Mediator Socket Close ErrorError
LogRhythm Mediator Event 4010Sub RuleLogRhythm Mediator Unprocessed Serialization ErrorError
LogRhythm Agent Event 2037Sub RuleLogRhythm Agent File Monitor Duplicate PolicyWarning
LogRhythm MPE Event 2020Sub RuleLogRhythm MPE Log Spool Write ErrorError
LogRhythm Agent Event 4019Sub RuleLogRhythm Agent Log Data Construction FailedError
LogRhythm Mediator Event 3007Sub RuleLogRhythm Mediator Begin Async Read FailureError
LogRhythm Agent Event 2040Sub RuleLogRhythm Agent File Monitor Config FailedError
LogRhythm Agent Event 1002Sub RuleLogRhythm Agent StoppedInformation
LogRhythm Agent Event 5003Sub RuleLogRhythm Agent Syslog File Open FailedError
LogRhythm Mediator Event 2042Sub RuleLogRhythm Mediator Listening Thread TimeoutWarning
LogRhythm Mediator Event 2003Sub RuleLogRhythm Mediator Config File Read FailureError
LogRhythm Mediator Event 2025Sub RuleLogRhythm Mediator License ID Retrieval FailureError
LogRhythm Mediator Event 2038Sub RuleLogRhythm Mediator MS License Load FailureError
LogRhythm Mediator Event 6001Sub RuleLogRhythm Mediator PM Connection ErrorError
LogRhythm Mediator Event 4004Sub RuleLogRhythm Mediator Unprocessed Log Write ErrorError
LogRhythm Agent Event 7004Sub RuleLogRhythm Agent Log Parse FailureError
LogRhythm Mediator Event 2010Sub RuleLogRhythm Mediator Invalid Active Archive PathError
LogRhythm ARM Event 5006Sub RuleLogRhythm ARM HbMon Agent State From Disk ErrorError
LogRhythm Agent Event 2049Sub RuleLogRhythm Agent File Monitor Add ErrorError
LogRhythm Mediator Event 4003Sub RuleLogRhythm Mediator Unprocessed Data Write ErrorWarning
LogRhythm Agent Event 2016Sub RuleLogRhythm Agent Self File Monitoring FailedError
LogRhythm Mediator Event 2051Sub RuleLogRhythm Mediator MS Record Update ErrorError
LogRhythm Agent Event 2041Sub RuleLogRhythm Agent Failed To Open Date Format FileError
LogRhythm Agent Event 4008Sub RuleLogRhythm Agent Unlicensed Agent ErrorError
LogRhythm Mediator Event 8020Sub RuleLogRhythm Mediator Script Open FailureError
LogRhythm MPE Event 2018Sub RuleLogRhythm MPE Error Requeuing EventsError
LogRhythm Agent Event 3006Sub RuleLogRhythm Agent Socket Connect FailureWarning
LogRhythm Agent Event 2033Sub RuleLogRhythm Agent No Clock Offset File FoundWarning
LogRhythm Mediator Event 4011Sub RuleLogRhythm Mediator Entered Suspend StateWarning
LogRhythm Agent Event 2035Sub RuleLogRhythm Agent Performance Counter FailureWarning
LogRhythm Mediator Event 2050Sub RuleLogRhythm Mediator MS Load ErrorError
LogRhythm Agent Event 4016Sub RuleLogRhythm Agent MS Unlicensed ErrorError
LogRhythm Agent Event 2009Sub RuleLogRhythm Agent Bad Event Log Read TimeoutWarning
LogRhythm MPE Event 2036Sub RuleLogRhythm MPE Unable To Load Global EntityError
LogRhythm Agent Event 5007Sub RuleLogRhythm Agent Syslog Receive Start FailureCritical
LogRhythm Agent Event 7008Sub RuleLogRhythm Agent Log Transfer Setup FailureError
LogRhythm Agent Event 7005Sub RuleLogRhythm Agent Missed Event LogsWarning
LogRhythm Mediator Event 4007Sub RuleLogRhythm Mediator Queue Processor Comm ErrorError
LogRhythm Agent Event 2032Sub RuleLogRhythm Agent REParsingFile Option MissingError
LogRhythm Agent Event 2030Sub RuleLogRhythm Agent Regex File Read FailureError
LogRhythm Agent Event 2027Sub RuleLogRhythm Agent Bad Max Message CountWarning
LogRhythm Mediator Event 6002Sub RuleLogRhythm Mediator DP Connection ErrorError
LogRhythm Mediator Event 4005Sub RuleLogRhythm Mediator Queue Processor Init FailureError
LogRhythm MPE Event 2019Sub RuleLogRhythm MPE Bad Log Spool PathError
LogRhythm MPE Event 2035Sub RuleLogRhythm MPE Policy Update ErrorError
LogRhythm Mediator Event 2014Sub RuleLogRhythm Mediator Bad Archive BatchWarning
LogRhythm ARM Event 5002Sub RuleLogRhythm ARM HbMon ShutdownInformation
LogRhythm Mediator Event 7020Sub RuleLogRhythm Mediator Failed To Queue Log DataError
LogRhythm Agent Event 4009Sub RuleLogRhythm Agent Auth Reply Send FailureWarning
LogRhythm Mediator Event 4008Sub RuleLogRhythm Mediator Log Data Format FailureError
LogRhythm Agent Event 5004Sub RuleLogRhythm Agent Syslog File Delete FailedError
LogRhythm Agent Event 4021Sub RuleLogRhythm Agent Received Suspend MessageWarning
LogRhythm Agent Event 6011Sub RuleLogRhythm Agent Netflow Flow Record Parse ErrorError
LogRhythm Agent Event 2043Sub RuleLogRhythm Agent Failed To Add Self Monitoring FileError
LogRhythm Mediator Event 2039Sub RuleLogRhythm Mediator Socket Buffer ErrorError
LogRhythm Agent Event 3002Sub RuleLogRhythm Agent IP Address Parsing FailureError
LogRhythm Mediator Event 8018Sub RuleLogRhythm Mediator Archive Delete ErrorError
LogRhythm Mediator Event 3012Sub RuleLogRhythm Mediator Invalid Protocol Msg CodeWarning
LogRhythm Agent Event 4015Sub RuleLogRhythm Agent MS Authentication FailureError
LogRhythm Mediator Event 2011Sub RuleLogRhythm Mediator Invalid Inactive Archive PathError
LogRhythm Mediator Event 2044Sub RuleLogRhythm Mediator Log Rotation ErrorError
LogRhythm Agent Event 6006Sub RuleLogRhythm Agent Netflow Socket Bind FailureError
LogRhythm Agent Event 2008Sub RuleLogRhythm Agent Bad Event Log BufferWarning
LogRhythm MPE Event 2034Sub RuleLogRhythm MPE Entity Update ErrorError
LogRhythm Agent Event 4014Sub RuleLogRhythm Agent Auth Reply Construction FailedError
LogRhythm Agent Event 5001Sub RuleLogRhythm Agent Syslog Server Start FailureCritical
LogRhythm MPE Event 2032Sub RuleLogRhythm MPE Maintenance ErrorError
LogRhythm Agent Event 2024Sub RuleLogRhythm Agent Bad Server PortWarning
LogRhythm Mediator Event 6003Sub RuleLogRhythm Mediator PM Connection Validation ErrorError
LogRhythm Mediator Event 1002Sub RuleLogRhythm Mediator StoppedInformation
LogRhythm Agent Event 5005Sub RuleLogRhythm Agent Syslog Server Bad IP AddressError
LogRhythm Mediator Event 2012Sub RuleLogRhythm Mediator Bad Max Archive SizeWarning
LogRhythm Agent Event 2023Sub RuleLogRhythm Agent Bad Client PortWarning
LogRhythm Mediator Event 4001Sub RuleLogRhythm Mediator Unprocessed Data Load ErrorWarning
LogRhythm Mediator Event 7004Sub RuleLogRhythm Mediator Unlicensed Agent ErrorError
LogRhythm Mediator Event 2028Sub RuleLogRhythm Mediator License Validation FailureError
LogRhythm MPE Event 2031Sub RuleLogRhythm MPE Configuration Update ErrorError
LogRhythm Agent Event 2051Sub RuleLogRhythm Agent Maintenance ErrorError
LogRhythm Agent Event 2044Sub RuleLogRhythm Agent Clock Offset File Write FailureError
LogRhythm Agent Event 2022Sub RuleLogRhythm Agent Bad NICWarning
LogRhythm Agent Event 2031Sub RuleLogRhythm Agent Virtual Source File Read FailureError
LogRhythm Agent Event 5010Sub RuleLogRhythm Agent Syslog Write Non-Match FailureError
LogRhythm Mediator Event 2052Sub RuleLogRhythm Mediator New MS Record Load ErrorError
LogRhythm MPE Event 2041Sub RuleLogRhythm MPE Diagnostic Rule Processing ErrorError
LogRhythm Mediator Event 2045Sub RuleLogRhythm Mediator Maintenance ErrorError
LogRhythm Mediator Event 7012Sub RuleLogRhythm Mediator MS Authentication FailureError
LogRhythm Mediator Event 2015Sub RuleLogRhythm Mediator Bad Archive CompressionWarning
LogRhythm Mediator Event 2040Sub RuleLogRhythm Mediator Bind FailureError
LogRhythm Agent Event 2047Sub RuleLogRhythm Agent File Monitor Policy ErrorError
LogRhythm Agent Event 2025Sub RuleLogRhythm Agent Failed To Parse Date FormatWarning
LogRhythm Mediator Event 3004Sub RuleLogRhythm Mediator Pre-existing SessionWarning
LogRhythm MPE Event 2029Sub RuleLogRhythm MPE Unexpected Log Processing ErrorError
LogRhythm MPE Event 2010Sub RuleLogRhythm MPE Bad Event Spool PathError
LogRhythm Mediator Event 4015Sub RuleLogRhythm Mediator Queue Processor ResurrectedWarning
LogRhythm Agent Event 3003Sub RuleLogRhythm Agent Invalid Network EndpointError
LogRhythm Mediator Event 8019Sub RuleLogRhythm Mediator Archive SubDir ErrorError
LogRhythm Mediator Event 2029Sub RuleLogRhythm Mediator Queue Allocation FailureError
LogRhythm Mediator Event 2016Sub RuleLogRhythm Mediator Bad Max Inactive CountWarning
LogRhythm ARM Event 5009Sub RuleLogRhythm ARM HbMon Error Querying Agent HB InfoError
LogRhythm Mediator Event 2001Sub RuleLogRhythm Mediator Listener FailureError
LogRhythm Agent Event 2034Sub RuleLogRhythm Agent Clock Offset File Read FailureError
LogRhythm MPE Event 2037Sub RuleLogRhythm MPE Initialization ErrorError
LogRhythm Mediator Event 3001Sub RuleLogRhythm Mediator Connection Handling ErrorError
LogRhythm MPE Event 1006Sub RuleLogRhythm MPE Shutdown InitiatedInformation
LogRhythm Mediator Event 2004Sub RuleLogRhythm Mediator Bad Mediator NameError
LogRhythm Mediator Event 5002Sub RuleLogRhythm Mediator Agent Update FailureError
LogRhythm ARM Event 5003Sub RuleLogRhythm ARM HbMon Mediator State To Disk ErrorError
LogRhythm Agent Event 3005Sub RuleLogRhythm Agent Socket Bind FailureCritical
LogRhythm Mediator Event 1003Sub RuleLogRhythm Mediator Startup FailureCritical
LogRhythm Agent Event 2020Sub RuleLogRhythm Agent Failed To Init Log Data QueueError
LogRhythm Mediator Event 2013Sub RuleLogRhythm Mediator Bad Max Archive AgeWarning
LogRhythm Mediator Event 2046Sub RuleLogRhythm Mediator DP Stats FailureWarning
LogRhythm Mediator Event 7005Sub RuleLogRhythm Mediator Auth Request Send ErrorError
LogRhythm Agent Event 4001Sub RuleLogRhythm Agent Ident Send FailureWarning
LogRhythm Agent Event 2058Sub RuleLogRhythm Agent Failed Syslog File PurgeError
LogRhythm Mediator Event 8008Sub RuleLogRhythm Mediator Archive Reader ErrorError
LogRhythm Mediator Event 3002Sub RuleLogRhythm Mediator Connection Accept ErrorError
LogRhythm MPE Event 1005Sub RuleLogRhythm MPE Startup InitiatedInformation
LogRhythm Agent Event 6007Sub RuleLogRhythm Agent Netflow Receive Start FailureCritical
LogRhythm Mediator Event 7010Sub RuleLogRhythm Mediator Session Lookup FailureError
LogRhythm Agent Event 6009Sub RuleLogRhythm Agent Netflow Processing FailureError
LogRhythm Mediator Event 8012Sub RuleLogRhythm Mediator Archive Cache ErrorError
LogRhythm MPE Event 2007Sub RuleLogRhythm MPE Null Log SourceError
LogRhythm MPE Event 2028Sub RuleLogRhythm MPE IP Octet Conversion FailureError
LogRhythm Agent Event 5009Sub RuleLogRhythm Agent Syslog Processing FailureError
LogRhythm Mediator Event 3010Sub RuleLogRhythm Mediator Invalid Protocol Msg VersionWarning
LogRhythm Agent Event 2021Sub RuleLogRhythm Agent Bad Mediator HostError
LogRhythm Agent Event 6008Sub RuleLogRhythm Agent Netflow Extraction FailureError
LogRhythm Mediator Event 2053Sub RuleLogRhythm Mediator License Record Update ErrorError
LogRhythm Mediator Event 7006Sub RuleLogRhythm Mediator Authentication FailureError
LogRhythm MPE Event 2012Sub RuleLogRhythm MPE Event Spool Write ErrorError
LogRhythm Agent Event 6005Sub RuleLogRhythm Agent Netflow Server Bad IP AddressError
LogRhythm Mediator Event 2002Sub RuleLogRhythm Mediator Config File Not FoundError
LogRhythm Agent Event 6001Sub RuleLogRhythm Agent Netflow Server Start FailureCritical
LogRhythm Mediator Event 7014Sub RuleLogRhythm Mediator MS Unlicensed ErrorError
LogRhythm Mediator Event 2005Sub RuleLogRhythm Mediator Bad MediatorIPError
LogRhythm Agent Event 6004Sub RuleLogRhythm Agent Netflow File Delete FailedError
LogRhythm Mediator Event 7011Sub RuleLogRhythm Mediator MS Auth Failure Send ErrorError
LogRhythm Mediator Event 3005Sub RuleLogRhythm Mediator Max Connections ReachedWarning
LogRhythm MPE Event 1002Sub RuleLogRhythm MPE Shutdown SuccessfullyInformation
LogRhythm Agent Event 2015Sub RuleLogRhythm Agent No FileMonitor Info FoundWarning
LogRhythm Mediator Event 2047Sub RuleLogRhythm Mediator Agent Record Poll ErrorError
LogRhythm Mediator Event 8016Sub RuleLogRhythm Mediator Archive Batch ErrorWarning
LogRhythm Agent Event 4020Sub RuleLogRhythm Agent Log Data Send FailureError
LogRhythm Mediator Event 2017Sub RuleLogRhythm Mediator Bad Inactive CountWarning
LogRhythm Mediator Event 8009Sub RuleLogRhythm Mediator Archive Read ErrorError
LogRhythm Mediator Event 7001Sub RuleLogRhythm Mediator Unavailable Send ErrorError
LogRhythm MPE Event 2009Sub RuleLogRhythm MPE Event Forwarding FailureError
LogRhythm Mediator Event 3006Sub RuleLogRhythm Mediator Connection Lookup Add ErrorError
LogRhythm MPE Event 1001Sub RuleLogRhythm MPE Started SuccessfullyInformation
LogRhythm Mediator Event 5003Sub RuleLogRhythm Mediator MS Update FailureError
LogRhythm Mediator Event 3011Sub RuleLogRhythm Mediator Invalid Protocol Msg TypeWarning
LogRhythm Agent Event 2050Sub RuleLogRhythm Agent File Monitor Removal ErrorError
LogRhythm Mediator Event 2041Sub RuleLogRhythm Mediator Listening Socket ErrorError
LogRhythm MPE Event 2003Sub RuleLogRhythm MPE Error Loading Performance CountersError
LogRhythm Mediator Event 3014Sub RuleLogRhythm Mediator Async Payload Read FailureError
LogRhythm Agent Event 2038Sub RuleLogRhythm Agent File Exceeds Size Hash LimitWarning
LogRhythm Mediator Event 2048Sub RuleLogRhythm Mediator Agent Record Update ErrorError
LogRhythm MPE Event 2033Sub RuleLogRhythm MPE KB Update ErrorError
LogRhythm Agent Event 2010Sub RuleLogRhythm Agent Bad Event Log Cache LifetimeWarning
LogRhythm Mediator Event 7015Sub RuleLogRhythm Mediator MS Success Send ErrorError
LogRhythm MPE Event 1004Sub RuleLogRhythm MPE Shutdown FailureError
LogRhythm Mediator Event 2006Sub RuleLogRhythm Mediator Bad Server PortWarning
LogRhythm MPE Event 2008Sub RuleLogRhythm MPE Null ClassificationError
LogRhythm Mediator Event 8013Sub RuleLogRhythm Mediator Archive Compression ErrorError
LogRhythm Mediator Event 1001Sub RuleLogRhythm Mediator StartedInformation
LogRhythm Agent Event 7007Sub RuleLogRhythm Agent Log Dequeue FailureError
LogRhythm MPE Event 2015Sub RuleLogRhythm MPE Error Loading Spooled Event FileError
LogRhythm Mediator Event 7007Sub RuleLogRhythm Mediator Session Insert FailureWarning
LogRhythm Agent Event 4011Sub RuleLogRhythm Agent Header Data Extraction FailureError
LogRhythm Mediator Event 2043Sub RuleLogRhythm Mediator MPE Shutdown TimeoutWarning
LogRhythm MPE Event 2006Sub RuleLogRhythm MPE Log Processing ErrorError
LogRhythm Mediator Event 2032Sub RuleLogRhythm Mediator Agent Record Load FailureError
LogRhythm Mediator Event 8010Sub RuleLogRhythm Mediator Archive Write ErrorError
LogRhythm Agent Event 2054Sub RuleLogRhythm Agent Failed To Write File Monitor DataError
LogRhythm Mediator Event 2019Sub RuleLogRhythm Mediator Bad Queue SizeWarning
LogRhythm Mediator Event 8002Sub RuleLogRhythm Mediator Script State FailureWarning
LogRhythm MPE Event 2002Sub RuleLogRhythm MPE Forwarding Thread AbortError
LogRhythm Agent Event 2014Sub RuleLogRhythm Agent Bad Cycle TimeWarning
LogRhythm Mediator Event 3015Sub RuleLogRhythm Mediator Complete Async Send FailureError
LogRhythm Mediator Event 3008Sub RuleLogRhythm Mediator Complete Async Read FailureError
LogRhythm Agent Event 2052Sub RuleLogRhythm Agent Serialized Log Data Write FailureError
LogRhythm Agent Event 2028Sub RuleLogRhythm Agent Missing Date FormatWarning
LogRhythm MPE Event 2004Sub RuleLogRhythm MPE Error Loading Central ConfigurationError
LogRhythm Mediator Event 2009Sub RuleLogRhythm Mediator Bad Archive Start TimeWarning
LogRhythm Mediator Event 7016Sub RuleLogRhythm Mediator System Source Creation FailureError
LogRhythm ARM Event 5011Sub RuleLogRhythm ARM HbMon Missing Mediator State FileWarning
LogRhythm Mediator Event 2007Sub RuleLogRhythm Mediator Bad Max ConnectionsWarning
LogRhythm Agent Event 2004Sub RuleLogRhythm Agent Config File Not FoundError
LogRhythm Agent Event 6003Sub RuleLogRhythm Agent Netflow File Open FailedError
LogRhythm Mediator Event 4009Sub RuleLogRhythm Mediator Queue Processor TimeoutWarning
LogRhythm Agent Event 2036Sub RuleLogRhythm Agent File Monitor Config Not FoundError
LogRhythm Agent Event 3007Sub RuleLogRhythm Agent Socket Closed By Data ProcessorWarning
LogRhythm MPE Event 2039Sub RuleLogRhythm MPE Diagnostic Rule Init ErrorError
LogRhythm Mediator Event 8017Sub RuleLogRhythm Mediator Archive Process ErrorError
LogRhythm Mediator Event 2008Sub RuleLogRhythm Mediator Bad Connection TimeoutWarning
LogRhythm MPE Event 2011Sub RuleLogRhythm MPE Event Spool Preparation ErrorError
LogRhythm Agent Event 2039Sub RuleLogRhythm Agent Failed To Obtain File StatsError
LogRhythm Agent Event 5008Sub RuleLogRhythm Agent Syslog Extraction FailureError
LogRhythm Mediator Event 7003Sub RuleLogRhythm Mediator Disabled Agent ErrorError
LogRhythm Agent Event 2011Sub RuleLogRhythm Agent Bad Max MemoryWarning
LogRhythm MPE Event 4102Sub RuleLogRhythm MPE Stats Deserialization ErrorError
LogRhythm Agent Event 7001Sub RuleLogRhythm Agent Failed To Obtain Remote ClockWarning
LogRhythm Mediator Event 5001Sub RuleLogRhythm Mediator Session Update FailureError
LogRhythm Mediator Event 3013Sub RuleLogRhythm Mediator Invalid Protocol Msg SizeWarning
LogRhythm Mediator Event 2036Sub RuleLogRhythm Mediator License Keys Load FailureError
LogRhythm Mediator Event 8014Sub RuleLogRhythm Mediator Archive Attribute ErrorError
LogRhythm Agent Event 6002Sub RuleLogRhythm Agent Netflow File Not FoundError
LogRhythm Agent Event 2006Sub RuleLogRhythm Agent Bad System Monitor NameError
LogRhythm Mediator Event 8003Sub RuleLogRhythm Mediator Script TimeoutWarning
LogRhythm Agent Event 1004Sub RuleLogRhythm Agent Log Collection StartInformation
LogRhythm Agent Event 4003Sub RuleLogRhythm Agent Sync Payload Read FailureError
LogRhythm Agent Event 2048Sub RuleLogRhythm Agent File Monitor ErrorError
LogRhythm Mediator Event 8006Sub RuleLogRhythm Mediator Archive Fatal ErrorError
LogRhythm Agent Event 2012Sub RuleLogRhythm Agent Bad Connection TimeoutWarning
LogRhythm Mediator Event 7017Sub RuleLogRhythm Mediator Heartbeat Reply Send ErrorError
LogRhythm ARM Event 5010Sub RuleLogRhythm ARM HbMon Error Writing Heartbeat EventError
LogRhythm Agent Event 4006Sub RuleLogRhythm Agent Unknown Agent ErrorError
LogRhythm Agent Event 2005Sub RuleLogRhythm Agent Config File Read FailureError
LogRhythm Mediator Event 3003Sub RuleLogRhythm Mediator Pre-existing ConnectionWarning
LogRhythm Mediator Event 2033Sub RuleLogRhythm Mediator Agent Record Read FailureError
LogRhythm Mediator Event 8011Sub RuleLogRhythm Mediator Archive Meta Data ErrorError
LogRhythm Agent Event 7002Sub RuleLogRhythm Agent Log Source Open FailedError
LogRhythm Agent Event 2019Sub RuleLogRhythm Agent Bad Max Syslog Suspend File SizeWarning
LogRhythm MPE Event 2017Sub RuleLogRhythm MPE Error Spooling Partial FileError
LogRhythm Agent Event 4007Sub RuleLogRhythm Agent Disabled Agent ErrorError
LogRhythm MPE Event 2021Sub RuleLogRhythm MPE Get Spooled Logs Files List ErrorError
LogRhythm Mediator Event 7008Sub RuleLogRhythm Mediator Session Lookup Insert FailureError
LogRhythm Agent Event 2007Sub RuleLogRhythm Agent Bad Shared SecretError
LogRhythm Mediator Event 3009Sub RuleLogRhythm Mediator Async Header Read FailureError
LogRhythm MPE Event 2027Sub RuleLogRhythm MPE Rule DisabledWarning
LogRhythm Agent Event 5006Sub RuleLogRhythm Agent Syslog Socket Bind FailureError
LogRhythm Agent Event 2055Sub RuleLogRhythm Agent Failed To Read File Monitor DataError
LogRhythm Mediator Event 2030Sub RuleLogRhythm Mediator Performance Counter FailureError
LogRhythm MPE Event 4103Sub RuleLogRhythm MPE Stats Serialization ErrorError
LogRhythm Agent Event 7009Sub RuleLogRhythm Agent Early Log Flush ExitWarning
LogRhythm Agent Event 2056Sub RuleLogRhythm Agent Failed To Queue File Monitor DataError
LogRhythm Mediator Event 2024Sub RuleLogRhythm Mediator Invalid IDError
LogRhythm MPE Event 4106Sub RuleLogRhythm MPE Stats Agent Heartbeat ErrorError
LogRhythm Mediator Event 4016Sub RuleLogRhythm Mediator Queue Processor Resurrect ErrorWarning
LogRhythm Mediator Event 2022Sub RuleLogRhythm Mediator Bad DP DataError
LogRhythm Mediator Event 2049Sub RuleLogRhythm Mediator New Agent Record Poll ErrorError
LogRhythm MPE Event 2038Sub RuleLogRhythm MPE System Message ErrorError
LogRhythm Mediator Event 6005Sub RuleLogRhythm Mediator DP Database Type ErrorError
LogRhythm Mediator Event 8007Sub RuleLogRhythm Mediator Archive Dir Verification ErrorError
LogRhythm Agent Event 2053Sub RuleLogRhythm Agent Max Memory WarningWarning
LogRhythm Mediator Event 3018Sub RuleLogRhythm Mediator Connection Close ErrorError
LogRhythm Agent Event 2029Sub RuleLogRhythm Agent Failed To Locate Date FormatWarning
LogRhythm Mediator Event 7013Sub RuleLogRhythm Mediator MS Unlicensed Send ErrorError
LogRhythm Agent Event 4010Sub RuleLogRhythm Agent Authentication FailureError
LogRhythm Agent Event 2001Sub RuleLogRhythm Agent Failed To Init Clock Offset TableError
LogRhythm Agent Event 3001Sub RuleLogRhythm Agent Socket Close FailureWarning
LogRhythm Mediator Event 2037Sub RuleLogRhythm Mediator License Verification FailureWarning
LogRhythm Mediator Event 8015Sub RuleLogRhythm Mediator Archive Move ErrorError
LogRhythm Agent Event 6010Sub RuleLogRhythm Agent Netflow Out Of Sequence DataWarning
LogRhythm MPE Event 2026Sub RuleLogRhythm MPE Event Forwarding Connection ErrorError
LogRhythm Agent Event 1003Sub RuleLogRhythm Agent Startup FailureCritical
LogRhythm ARM Event 5005Sub RuleLogRhythm ARM HbMon Mediator State From Disk ErrorError
LogRhythm Agent Event 2013Sub RuleLogRhythm Agent Bad Heartbeat IntervalWarning
LogRhythm MPE Event 2024Sub RuleLogRhythm MPE Unable To Rotate Event Suspense LogError
LogRhythm MPE Event 2023Sub RuleLogRhythm MPE Spooled Logs Requeing ErrorError
LogRhythm Mediator Event 2034Sub RuleLogRhythm Mediator Message Source Load FailureError
LogRhythm MPE Event 2025Sub RuleLogRhythm MPE Error Writing To Event Suspense LogCritical
LogRhythm MPE Event 4001Sub RuleLogRhythm MPE Stats Initialization ErrorCritical
LogRhythm MPE Event 1003Sub RuleLogRhythm MPE Startup FailureCritical
LogRhythm MPE Event 2013Sub RuleLogRhythm MPE Max Event Spool Buffer ReachedCritical
LogRhythm ARM Event 3011Sub RuleLogRhythm ARM NfnEng Notify By Role ErrorError
LogRhythm ARM Event 3010Sub RuleLogRhythm ARM NfnEng Batch Lost On ShutdownError
LogRhythm ARM Event 2002Sub RuleLogRhythm ARM Notification Process SuspendWarning
LogRhythm ARM Event 2001Sub RuleLogRhythm ARM Main Process ReconnectWarning
LogRhythm ARM Event 3009Sub RuleLogRhythm ARM NfnEng Batch Processing FailureError
LogRhythm ARM Event 3007Sub RuleLogRhythm ARM NfnEng Tertiary SMTP FailureError
LogRhythm ARM Event 2006Sub RuleLogRhythm ARM Event Processing FailureError
LogRhythm ARM Event 3004Sub RuleLogRhythm ARM NfnEng Unexpected SMTP FailureError
LogRhythm ARM Event 1004Sub RuleLogRhythm ARM Shutdown FailureError
LogRhythm ARM Event 3001Sub RuleLogRhythm ARM NfnEng Shutdown FailureError
LogRhythm ARM Event 3003Sub RuleLogRhythm ARM NfnEng Notification Log FailureError
LogRhythm ARM Event 3005Sub RuleLogRhythm ARM NfnEng Primary SMTP FailureError
LogRhythm ARM Event 3006Sub RuleLogRhythm ARM NfnEng Secondary SMTP FailureError
LogRhythm ARM Event 2008Sub RuleLogRhythm ARM Alarm Queue FullWarning
LogRhythm ARM Event 2005Sub RuleLogRhythm ARM Event Query FailureError
LogRhythm ARM Event 3008Sub RuleLogRhythm ARM NfnEng Batch Processing ErrorError
LogRhythm ARM Event 2009Sub RuleLogRhythm ARM Alarm Processing FailureError
LogRhythm ARM Event 2004Sub RuleLogRhythm ARM Maintenance FailureError
LogRhythm ARM Event 2012Sub RuleLogRhythm ARM Initializing Global Networks FailureCritical
LogRhythm ARM Event 2007Sub RuleLogRhythm ARM Rule Initialization FailureCritical
LogRhythm ARM Event 2014Sub RuleLogRhythm ARM Connection Failure On StartupCritical
LogRhythm ARM Event 1003Sub RuleLogRhythm ARM Startup FailureCritical
LogRhythm ARM Event 2010Sub RuleLogRhythm ARM All Alarms ProcessedInformation
LogRhythm ARM Event 2011Sub RuleLogRhythm ARM Last Event ID ProcessedInformation
LogRhythm ARM Event 1006Sub RuleLogRhythm ARM Shutdown InitiatedInformation
LogRhythm ARM Event 1005Sub RuleLogRhythm ARM Startup InitiatedInformation
LogRhythm ARM Event 1002Sub RuleLogRhythm ARM Shutdown SuccessfullyInformation
LogRhythm ARM Event 3002Sub RuleLogRhythm ARM NfnEng Shutdown SuccessfullyInformation
LogRhythm ARM Event 2003Sub RuleLogRhythm ARM Notification Process ResumeInformation
LogRhythm ARM Event 1001Sub RuleLogRhythm ARM Started SuccessfullyInformation

Sample Logs

<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='LogRhythm AI Engine Communication Manager'/><EventID Qualifiers='0'>4005</EventID><Level>Warning</Level><Task>None</Task><Keywords>Classic</Keywords><TimeCreated SystemTime='2019-10-22T15:05:54.000000000Z'/><EventRecordID>78039577</EventRecordID><Channel>Application</Channel><Computer>_destinationhostname</Computer><Security/></System><EventData>Received new management connection request from unauthorized end point: 1.1.1.1:37510</EventData></Event>

Mapping with LogRhythm Schema  

Device Key in Log Message

Log Value

LogRhythm Schema

Data Type

N/A1.1.1.1<sip>Number/IPAddress
EventID Qualifiers4005<vmid>Number
N/A37510<sport>Number
N/AN/A<object>Text/String
Computer_destinationhostname<dname>Text/String
N/AN/A<objectname>Number/Text/String
N/ANaN<rate>Number
N/AAI Engine Communication Manager<tag1>Text/String
N/AWarning<tag2>Text/String
N/AN/A<tag3>Text/String