/
cef0.cisco

cef0.cisco

Introduction

The tags beginning with cef0.cisco identify events in CEF format generated by Cisco.

Tag structure

Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cef0.deviceVendor.deviceProduct.

In this case, the valid data tables are:

Tags

Devo tables

Tags

Devo tables

cef0.cisco.asa

cef0.cisco.asa

cef0.cisco.c100vEmailSecurityVirtualAppliance

cef0.cisco.c100vEmailSecurityVirtualAppliance

cef0.cisco.c300vEmailSecurityVirtualAppliance

cef0.cisco.c300vEmailSecurityVirtualAppliance

cef0.cisco.c600vSecureEmailGatewayVirtual

cef0.cisco.c600vSecureEmailGatewayVirtual

cef0.cisco.ciscoIntrusionPreventionSystem

cef0.cisco.ciscoIntrusionPreventionSystem

cef0.cisco.ciscoSecureAcs

cef0.cisco.ciscoSecureAcs

cef0.cisco.ciscorouter

cef0.cisco.ciscorouter

cef0.cisco.fireamp

cef0.cisco.fireamp

cef0.cisco.firepower

cef0.cisco.firepower

cef0.cisco.fwsm

cef0.cisco.fwsm

cef0.cisco.ironport

cef0.cisco.ironport

cef0.cisco.ironportAmp

cef0.cisco.ironportAmp

cef0.cisco.ironportAuthentication

cef0.cisco.ironportAuthentication

cef0.cisco.merakiAccessPoint

cef0.cisco.merakiAccessPoint

cef0.cisco.nxOs

cef0.cisco.nxOs

cef0.cisco.stealthwatch

cef0.cisco.stealthwatch

cef0.cisco.umbrella

cef0.cisco.umbrella

cef0.cisco.wirelessLanController

cef0.cisco.wirelessLanController

How is the data sent to Devo?

CEF data can be sent directly to Devo or by using a relay. To use the CEF default relay rule, send to the relay’s port 13000. Learn more about CEF syslog format and how Devo tags these events in Technologies supported in CEF syslog format.

Table structure

These are the fields displayed in these tables:

Related content

cef0.cisco
cef0.cisco
More like this
cef0.cisco
cef0.cisco
More like this
cef0.anubisnetworks
cef0.anubisnetworks
More like this
cef0.mcafee
cef0.mcafee
More like this
cef0.forescoutTechnologies
cef0.forescoutTechnologies
More like this
cef0.impervaInc
cef0.impervaInc
More like this