Previous Topic: Port Close ActionNext Topic: Port Establishment Action


Port Error Action

Error conditions related to a port. Less severe events should be mapped to the Port Warning action. More severe events that warrant immediate action should be mapped to the Port Alert action.

Information

Level

Source - User Information

Tertiary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Tertiary

Dest - Host Information

Primary

Dest - Object Information

Primary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Failure

F

5