PROVISION RELATED EVENTS
APPLICATION PROVISIONING STARTED
-
Code: 111
-
Brief Description: Application Provisioning Started
-
Provided Information:
-
IP Address of the user
-
Application Version
-
Started at (Timestamp)
-
Application name
-
Started by (username)
-
-
Sample log message:
-
CEF format
Jul 6 12:12:35 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.3.0|111|Application Provisioning Started|5|src=10.16.6.4 version=8 started_at=06 Jul 2020 04:13:38 PM UTC application=RHEL_webgoat_15 [email protected] msg=Application provisioning started for RHEL_webgoat_15.
-
CEF - Fixed Key Definition format
Sep 7 10:00:50 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.4.0|111|Application Provisioning Started|5|cs1Label=src cs1=10.16.6.4 cs2Label=version cs2=8 cs3Label=started_at cs3=07 Sep 2020 02:02:15 PM UTC cs4Label=application cs4=Win_Webgoat_10_job cs5Label=started_by [email protected] cs6Label=msg cs6=Application provisioning started for Win_Webgoat_10_job.
-
APPLICATION PROVISIONING FAILED
-
Code: 112
-
Brief Description: Application Provisioning Failed
-
Provided Information:
-
IP Address of the user
-
Application Version
-
Provisioned at (Timestamp)
-
Started at (Timestamp)
-
Application name
-
-
Sample log message:
-
CEF format
Jul 20 07:57:37 10.16.4.112 CEF: 1|Virsec Security Platform|Virsec|1.3.0|112|Application Provisioning Failed|5|src=10.16.4.112 version=7.0 reason= Instance not Registered started_at=20 Jul 2020 11:57:45 AM UTC application=PHP_Demo msg= Application provisioning failed for PHP_Demo.
-
CEF - Fixed Key Definition format
Oct 28 00:35:06 int.cms.virsec.com CEF: 1|Virsec Security Platform|Virsec|1.4.0|112|Application Provisioning Failed|5|cs1Label=src cs1=10.16.13.12 cs2Label=reason(s) cs2=Instance not Registered cs3Label=version cs3=1.0 cs4Label=failed_at cs4=28 Oct 2020 06:39:22 AM UTC cs5Label=started_at cs5=28 Oct 2020 06:39:22 AM UTC cs6Label=application cs6=Tomcat cs7Label=msg cs7=Application provisioning failed for Tomcat
-
APPLICATION PROVISIONING STOPPED
-
Code: 113
-
Brief Description: Application Provisioning Stopped
-
Provided Information:
-
IP Address of the user
-
Stopped by
-
Application Version
-
Started at (Timestamp)
-
Stopped at (Timestamp)
-
Application name
-
-
Sample log message:
-
CEF format
Jul 6 12:13:05 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.3.0|113|Application Provisioning Stopped|5|src=10.16.6.4 [email protected] version=4 started_at=06 Jul 2020 07:12:06 AM UTC stopped_at=06 Jul 2020 04:14:10 PM UTC application=rhel76_webgoat_17 msg=Application provisioning stopped for rhel76_webgoat_17.
-
CEF - Fixed Key Definition format
Sep 7 09:59:50 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.4.0|113|Application Provisioning Stopped|5|cs1Label=src cs1=10.16.6.4 cs2Label=stopped_by [email protected] cs3Label=version cs3=8 cs4Label=started_at cs4=07 Sep 2020 01:25:08 PM UTC cs5Label=stopped_at cs5=07 Sep 2020 02:01:17 PM UTC cs6Label=application cs6=Win_Webgoat_10_job cs7Label=msg cs7=Application provisioning stopped for Win_Webgoat_10_job.
-
APPLICATION PROVISIONING COMPLETED
-
Code: 115
-
Brief Description: Application Provisioning Completed
-
Provided Information:
-
IP Address of the user
-
Application Version
-
Provisioned at (Timestamp)
-
Started at (Timestamp)
-
Application name
-
-
Sample log message:
-
CEF format
Jul 6 12:12:35 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.3.0|115|Application Provisioning Completed|5|src=10.16.6.4 version=8 provisioned_at=06 Jul 2020 04:13:40 PM UTC started_at=06 Jul 2020 04:13:40 PM UTC application=RHEL_webgoat_15 msg=Application provisioning completed for RHEL_webgoat_15.
-
CEF - Fixed Key Definition format
Sep 7 10:00:50 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.4.0|115|Application Provisioning Completed|5|cs1Label=src cs1=10.16.6.4 cs2Label=version cs2=8 cs3Label=provisioned_at cs3=07 Sep 2020 02:02:18 PM UTC cs4Label=started_at cs4=07 Sep 2020 02:02:17 PM UTC cs5Label=application cs5=Win_Webgoat_10_job cs6Label=msg cs6=Application provisioning completed for Win_Webgoat_10_job.
-