32
E
C
VENT
ATEGORY
Table 2-15 System Categories (continued)
Low Level Event
Category
Cron Status
Cron Failed
Cron Successful
Daemon
Daemon Status
Daemon Failed
Daemon Successful
Kernel
Kernel Status
Kernel Failed
Kernel Successful
Authentication
Information
Notice
Warning
Error
Critical
Debug
Messages
Privilege Access
C
ORRELATION
Description
Indicates a crontab status
message.
Indicates a crontab failure
message.
Indicates a crontab success
message.
Indicates a daemon message.
Indicates a daemon status
message.
Indicates a daemon failure
message.
Indicates a daemon success
message.
Indicates a kernel message.
Indicates a kernel status
message.
Indicates a kernel failure
message.
Indicates a kernel successful
message.
Indicates an authentication
message.
Indicates an informational
message.
Indicates a notice message.
Indicates a warning message.
Indicates an error message.
Indicates a critical message.
Indicates a debug message.
Indicates a generic message.
Indicates that privilege access
was attempted.
STRM Event Category Correlation Reference
Severity Level
Event Correlation/
(0 to 10)
Processing
1
Correlation Group 5 Scenario 2
4
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
4
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
2
Correlation Group 5 Scenario 2
3
Correlation Group 5 Scenario 2
5
Correlation Group 5 Scenario 2
7
Correlation Group 5 Scenario 2
9
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
1
Correlation Group 5 Scenario 2
3
Correlation Group 5 Scenario 2
Additional Event
Processing
Need help?
Do you have a question about the SECURITY THREAT RESPONSE MANAGER 2008.2 - EVENT CATEGORY CORRELATION REFERENCE GUIDE REV 1 and is the answer not in the manual?
Questions and answers