Kernel Notification Action

Common Event Grammar › Host Security Category › Kernel and OS Activity › Kernel Notification Action

Kernel Notification Action

The Kernel Notification action expresses information on notifications and messages from a system kernel. You can map any type of kernel notification to this action, if the event cannot be mapped by a more specific action. Use the Kernel Status action if the event describes the status of a kernel.

Information	Level
Source - User Information	Secondary
Source - Host Information	Tertiary
Source - Object Information	Tertiary
Source - Process Information	Tertiary
Source - Group Information	Tertiary
Dest - User Information	Tertiary
Dest - Host Information	Primary
Dest - Object Information	Primary
Dest - Group Information	Tertiary
Agent - Information	Primary
Agent - Host Information	Primary
Event Source - Host Information	Primary
Event Source - Information	Tertiary
Event - Information	Primary
Result - Information	Primary

Result	event_result	event_severity
Success	S	2
Failure	F	3