Introduction
The tags beginning with dhcp.unix
identify events generated by UNIX DHCP services.
Valid tags and data tables
The full tag must have 3 levels. The first two are fixed as dhcp.unix
. The third level identifies the type of events sent.
These are the valid tags and corresponding data tables that will receive the parsers' data:
Product / Service | Tags | Data tables |
---|---|---|
Unix DHCP server |
|
|
For more information, read more About Devo tags.
Table structure
These are the fields displayed in this table:
dhcp.unix.stdout
Field | Type | Field transformation | Source field name | Extra fields |
---|---|---|---|---|
eventdate |
| |||
dhcpserver |
| vmachine | ||
serverdate |
| |||
transmitter |
| |||
source |
| |||
toAddress |
| |||
toDeviceId |
| |||
fromAddress |
| |||
ofAddress |
| |||
onAddress |
| |||
forAddress |
| |||
unknown |
| |||
actuator |
| |||
leaseIpAddress |
| ifthenelse(isnull(onAddress), toAddress, onAddress) | onAddress toAddress | |
leaseHardwareAddress |
| ifthenelse(isnull(onAddress), toDeviceId, toAddress) | onAddress toDeviceId toAddress | |
rawMessage |
| ✓ | ||
hostchain |
| ✓ | ||
tag |
| ✓ |