Document toolboxDocument toolbox

network.a10

Owned by Former user (Deleted)
Mar 11, 2022
2 min read

Introduction

The tags beginning with network.a10 identify events generated by A10 Networks.

Valid tags and data tables

The full tag must have 4 levels. The first two are fixed as network.a10. The third level identifies the type of events sent, and the fourth level indicates the event subtype. 

Technology

Brand

Type

Subtype

Technology

Brand

Type

Subtype

network

a10

  • thunder-adc

 

  • acos

  • system

  • mgmt

These are the valid tags and corresponding data tables that will receive the parsers' data:

Tag

Data table

Tag

Data table

network.a10.thunder-adc.acos

network.a10.thunderAdc

network.a10.thunder-adc.system

network.a10.thunder-adc.system

network.a10.thunder-adc.mgmt

network.a10.thunder-adc.mgmt

Log samples

The following are sample logs sent to each of the network.a10 data tables. Also, find how the information will be parsed in your data table under each sample log.

Fields marked as Extra in the table below are not shown by default in data tables and need to be explicitly requested in the query. You can find them marked as Extra when you perform a query so they can be easily identified. Learn more about this in Selecting unrevealed columns.

 

 

network.a10.thunder-adc.acos

2022-02-24 15:45:07.995 localhost=127.0.0.1 network.a10.thunder-adc.acos: [ACOS]<4> HTTP log line id=671285289, length=64240, content=0:63 4c3343395a3433364945384b54575341 : L3C9Z436IE8KTWSA 4554464e504737504956474554383145 : ETFNPG7PIVGET81E 54575243513644495457585952355447 : TWRCQ6DITWXYR5TG 334f4332554b524635583045595a4d4b : 3OC2UKRF5X0EYZMK

And this is how the log would be parsed:

Field

Value

Type

Extra fields

eventdate

2022-02-24 15:45:07.995

timestamp

 

hostname

localhost

str

 

logType

ACOS

str

 

level

4

int4

 

msg

HTTP log line id=671285289, length=64240, content=0:63 4c3343395a3433364945384b54575341 : L3C9Z436IE8KTWSA 4554464e504737504956474554383145 : ETFNPG7PIVGET81E 54575243513644495457585952355447 : TWRCQ6DITWXYR5TG 334f4332554b524635583045595a4d4b : 3OC2UKRF5X0EYZMK

str

 

hostchain

localhost=127.0.0.1

str

✓

tag

network.a10.thunder-adc.acos

str

✓

rawMessage

[ACOS]<4> HTTP log line id=671285289, length=64240, content=0:63 4c3343395a3433364945384b54575341 : L3C9Z436IE8KTWSA 4554464e504737504956474554383145 : ETFNPG7PIVGET81E 54575243513644495457585952355447 : TWRCQ6DITWXYR5TG 334f4332554b524635583045595a4d4b : 3OC2UKRF5X0EYZMK

str

 

 

 

network.a10.thunder-adc.system

2022-02-24 15:45:08.234 localhost=127.0.0.1 network.a10.thunder-adc.system: [SYSTEM]<3> The user, userServcieNow, from the remote host, 192.168.5.9, failed in the cli authentication.

And this is how the log would be parsed:

Field

Value

Type

Extra fields

eventdate

2022-02-24 15:45:08.234

timestamp

 

hostname

localhost

str

 

logType

SYSTEM

str

 

level

3

int4

 

msg

The user, userServcieNow, from the remote host, 192.168.5.9, failed in the cli authentication.

str

 

hostchain

localhost=127.0.0.1

str

✓

tag

network.a10.thunder-adc.system

str

✓

rawMessage

[SYSTEM]<3> The user, userServcieNow, from the remote host, 192.168.5.9, failed in the cli authentication.

str

 

 

 

network.a10.thunder-adc.mgmt

2022-02-24 15:45:08.234 localhost=127.0.0.1 network.a10.thunder-adc.mgmt: [MGMT]<4> Certificate file WILDCARD.NFL.INFO has expired. Expiration time is Jun 10 17:36:07 2019 GMT.

And this is how the log would be parsed:

Field

Value

Type

Extra fields

eventdate

2022-02-24 15:45:08.234

timestamp

 

hostname

localhost

str

 

logType

MGMT

str

 

level

4

int4

 

msg

Certificate file WILDCARD.NFL.INFO has expired. Expiration time is Jun 10 17:36:07 2019 GMT.

str

 

hostchain

localhost=127.0.0.1

str

✓

tag

network.a10.thunder-adc.mgmt

str

✓

rawMessage

[MGMT]<4> Certificate file WILDCARD.NFL.INFO has expired. Expiration time is Jun 10 17:36:07 2019 GMT.

str

 

 

Â