| Info |
|---|
Check the reference vendor documentation here. |
Introduction
The tags beginning with network.hp identify events generated by HP.
...
These are the valid tags and corresponding data tables that will receive the parsers' data:
Product / Service | Tags | Data tables |
|---|
HP printers | network.hp.printer.events
| network.hp.printer.events
|
HP networking switches | network.hp.switch
| network.hp.switch
|
network.hp.switch.addrmgr
| network.hp.switch.addrmgr
|
network.hp.switch.auth
| network.hp.switch.auth
|
network.hp.switch.cdp
| network.hp.switch.cdp
|
network.hp.switch.chassis
| network.hp.switch.chassis
|
network.hp.switch.dhcp
| network.hp.switch.dhcp
|
network.hp.switch.ffi
| network.hp.switch.ip
|
network.hp.switch.ip
| network.hp.switch.ffi
|
network.hp.switch.lldp
| network.hp.switch.lldp
|
network.hp.switch.loopProtect
| network.hp.switch.loopProtect
|
network.hp.switch.mgr
| network.hp.switch.mgr
|
network.hp.switch.notice
| network.hp.switch.notice
|
network.hp.switch.ports
| network.hp.switch.ports
|
network.hp.switch.radius
| network.hp.switch.radius
|
network.hp.switch.sntp
| network.hp.switch.sntp
|
network.hp.switch.ssh
| network.hp.switch.ssh
|
network.hp.switch.stack
| network.hp.switch.stack
|
network.hp.switch.system
| network.hp.switch.system
|
network.hp.switch.tftp
| network.hp.switch.tftp
|
network.hp.switch.udpf
| network.hp.switch.udpf
|
network.hp.switch.vlan
| network.hp.switch.vlan
|
For more information, read more About Devo tags.
How is the data sent to Devo?
For network.hp.switch.* tags, define the following relay rule to send these events to Devo:
Source message - ^\d+\s([\w\-\.]+?):
Target tag - network.hp.switch.\m1
Check both the Stop processing and Sent without Syslog tag options.
| Note |
|---|
Note that in the Target tag, m1 should be the system_module (group capture 1) in the Source message RegEx. |
Table structure
These are the fields displayed in these tables:
| Rw ui tabs macro |
|---|
network.hp.printer.eventsField | Type | Extra fields |
|---|
eventdate | timestamp
| | host | str
| | facility | str
| | level | str
| | event_summary | str
| | time | str
| | user | str
| | source_Ip | ip4
| | outcome | str
| | interface | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Source field name | Extra fields |
|---|
eventdate | timestamp
| | | type | str
| vtype | | hostname | str
| | | event_number | str
| | | system_module | str
| | | event_message | str
| | | hostchain | str
| | ✓ | tag | str
| | ✓ | rawMessage | str
| | ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | user | str
| | action | str
| | process_name | str
| | src_ip | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | failures | int4
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | subject | str
| | message | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | source_port | str
| | message | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | subject | str
| | message | str
| | device_ip | ip4
| | device_ip_str | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | subject | str
| | source_port | str
| | vlan_id | str
| | peer_device_port | str
| | peer_device_vlan_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| | hostname | str
| | event_number | str
| | system_module | str
| | event_message | str
| | source_port | str
| | action | str
| | message | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
| tag3 | tag3network.hp.switch.mgrField | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
action | str
| |
source_ip | ip4
| |
source_ip_str | str
| |
mode | str
| |
sequence_number | int4
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
notice
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
notice_type | str
| |
user |
event_id | str
| |
config_method | str
| |
actionprocessuser_name | str
| |
remote_ip_address | ip4
| |
srcremote_ip_address_str | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
port | str
| |
port_status | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
server_ip | ip4
| |
server_ip_str | str
| |
message | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
updated_time | int8
| |
source_ip | ip4
| |
source_ip_str | str
| |
previous_time | str
| |
current_time | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
message | str
| |
source_ip | ip4
| |
source_ip_str | str
| |
reason | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
error | str
| |
message | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
Field | Type | Extra fields |
|---|
eventdate | timestamp
| |
hostname | str
| |
event_number | str
| |
system_module | str
| |
event_message | str
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |
