Operations Classifications
The following tables provide Operations classification information. This table lists descriptions and examples.
Classification | Description | Examples Of |
---|---|---|
Critical | Logs reporting critical conditions. |
|
Error | Logs reporting error conditions. |
|
Warning | Logs reporting warnings. |
|
Information | Logs reporting general information. |
|
Network Allow | Logs reporting on network activity that was allowed per a device policy. |
|
Network Deny | Logs reporting on network activity that was not allowed per a device policy. |
|
Network Traffic | Logs reporting on network traffic activity such as flows, connections, and usage statistics |
|
Other Operations | Logs reporting on operations activity not otherwise classifiable |
Operation Classification Defaults
This table gives defaults for Risk Rating (RR), Event Forwarding, and LogMart Forwarding.
Classification | Default Risk Rating * | Default Event Forwarding ** | Default LogMart Forwarding |
---|---|---|---|
Critical | 9 | Yes | Yes |
Error | 7 | Yes | Yes |
Warning | 5 | Yes | Yes |
Information | 0 | No | No |
Network Allow | 0 | No | No |
Network Deny | 1 | No | No |
Network Traffic | 0 | No | No |
Other Operations | 0 | No | No |
*This is the usual Risk Rating assigned to a Common Event associated with this classification. However, Risk Ratings varies by Common Event within the same classification. This value is a general default, not strictly enforced.
**This is the default setting for forwarding the log to the Platform Manager assigned to a Common Event associated with this classification.