http://www.splunkbase.com/feed/events.rss/ SplunkBase Event Types Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:3jvvcy3-ssh-accepted-publickey 997e664b347ab25f702bc5efd1f8ea49 sshd Acdepted publickey OR password punct="*__::__[]:______...___" Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:3ds82wv-ssh-close 0c08061ff4f3d382449e520957518155 punct="*__::__[]:____..." OR punct="*__::__[]:_(:):_____" sshd (Closing connection to) OR (Connection closed by) OR (session closed) Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:urp5jq-ssh-open 6820079b6276eecfff89d8d4f170b153 punct="*__::__[]:_(:):_____*__(=)" sshd (session opened) OR (connection from) Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:3tswu5h-ssh-login-postponed abd7757977fabf907f7deb016c627206 punct="*_::__[]:____*__...___" sshd Postponed Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:42quzau-firewall-deny 0b87a57817687a3a4cf56ef786dfa183 signature=firewall action="BLOCK" OR action=dropped Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:t2yen7-firewall-accept 8a9316c312271db8ce62351e56850694 signature=firewall action="PASS" OR action=permit Mon, 02 Jun 2008 18:47:07 +0000 http://www.splunkbase.com/events/eventtype:3m7xf9j-linux-system-restart f4291fa3e19390f00a1518e304f9f92e punct::__::_*:_* shutdown: shutting down system reboot Sun, 27 Apr 2008 18:29:02 +0000 http://www.splunkbase.com/events/eventtype:gqag69-jira b279159616dadb94526c4bcaa5600505 source=jira Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:pc8jkg-yum befdf085a02e31a445bcd298eba71347 source=yum Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:3namzpn-os_linux 57976e405cba208a58d45cc996cdf956 source=vmstat source=iostat source=ps source=top source=netstat source=time source=lsof source=df source=auditd source=yum Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:3k88a9n-vmstat 1b8ebea6d6209450d653d656c22cd5a5 source=vmstat Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:44hx783-iostat efdc9aec6702e9d4b78132af929daea2 source=iostat Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:3y9mkyr-ps 43df8c439fe243f3f7fb42530a880fba source=ps Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:3uajqmd-top 66ff13dbdf0fc08db7bb22cf454a15cd source=top Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:4dkgmsn-netstat b1e5baf0027e2bfc6b42284c0480c15f source=netstat Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:3dp6r45-time dc73b2216a6e1e7bbb9d5f81d6b4c039 source=time Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:xuw5nj-lsof 9c03ea267241eb411b6f92da69f3ceac source=lsof Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:359cm65-df 31cf44140620f4458a244775fa1067cb source=df Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:3trnvdz-auditd_create 7957dfdc80da5888cd58250392422ff5 source=auditd Sun, 27 Apr 2008 17:54:37 +0000 http://www.splunkbase.com/events/eventtype:q8mfnt-auditd_modify 2a0664d559e7ccd007fb5afc5feaefa0 source=auditd PATH Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:4e4ezn3-dhcprequest 134ae63c012049d35640eb88f6ca6969 "punct::___::_-..._:___*" enet interop Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:3qvu6np-dhcpevents 41d8a8f4a1996078a5d688eb05a1b786 dhcpd via Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:6532vv-dhcpdiscover bf2afcaadf0fe6067cf6201909cab4ad "punct::___::_..._:___:::::__...:___" network segment unknown Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:4dnvtzu-dhcpack abb97399552be215a26dc6a513940783 "punct::__*:*..._*:*__*" dhcpack Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:3cveb8g-dhcp f61da5d0c08b099a039b86ba95661d9c "punct::__*:*..._*:*__*" Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:c8tbtz-aruba_radio_stats 4bc00d9674e8220746783cccb71ded80 "punct::__::_..._[...]_[]:_<>_<>_|_-@..._|__:__:_=_=_-=_-=" aps aruba mon-aps mon-stas noti radio sapd stas stats host="45.15.0.6" Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:45ayje7-DHCPINFORM b28b4f9ef401179f8fc7e560e6d352fb "punct::___::_..._:___...__" dhcpinform via Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:zm385t-DHCPACK 4c8de66aef27bab6377d8f65f0a8be4d "punct::___::_..._:___..._(:::::)__" dhcpack via Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:3zcvbz3-dns_resolution_failure_named 3e80904788aa49991a22126ad773a40a named lame Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:3frq8ak-fschange_add_file f359291f92cc66d3c7cc6ae8bb42ff3a action=add source="fschangemonitor" NOT path=/tftp* Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:wuzfap-fschange_add_network 6af38c7cb1e5dc3e76a7b2f22b0af0c5 action=add source="fschangemonitor" path=/tftp* Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:3jkrtuw-rogue_ap 78183fa9f46f67806eea7a725aecde65 "punct::__::_..._[...]_[]:_<>_<>_|_-@..._|__:______:::::_:" noti rap setting suspect type host="45.15.0.6" Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:zcgjbt-new_ap_detected e6ea901a6c45178b70a11a90903bcd76 "punct::__::_..._[...]_[]:_<>_<>_|_-@..._|__:_____=___=_*" aruba bssid channel detected new noti sapd ssid host="45.15.0.6" Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:cgq4cg-login_success 6a1c0b51c8d2570286ba59137fbb3dc9 "punct::__::_---..._:_:______..." address cli extwansf logged user Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:a8v3tw-inactive_node_detected ea230e05d57906347bc9c7630ab2c223 "punct::__::_..._[...]_[]:_<>_<>_|_-@..._|__:_____=_*" aruba bssid detected noti sapd ssid host="45.15.0.6" Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:35yy9a6-fschange_modify_network 5962b3e39bb046bf70e5f5e81a945e02 action=update path=/tftp* Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:p8xnzk-fschange_modify_file 2ad0b1c593458886439da905a272d022 action=update NOT path=/tftp* Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:3e9hufz-fschange_delete_network 3bb65345bf3166e2e626213f9a243b0d action=delete source="fschangemonitor" path=/tftp* Sun, 27 Apr 2008 17:45:39 +0000 http://www.splunkbase.com/events/eventtype:jfhv2y-fschange_delete_file 73639190cb84858aacc8458b35f58ab6 action=delete source="fschangemonitor" NOT path=/tftp* Sun, 27 Apr 2008 17:45:38 +0000 http://www.splunkbase.com/events/eventtype:3368afw-CM e64fd8604d455d6dbaa93198c2964384 source=fschangemonitor OR source=auditd OR source=yum OR source=jira OR source=os_linux OR source=cisco