The System Call Alert action expresses information on system call-related alerts. A system call is a request made by any program to the operating system for performing tasks. System calls provide the interface between a process and the operating system. You can map any type of alert about system calls to this action. You can map an error condition that does not warrant immediate attention to the System Call Error action.
Information |
Level |
---|---|
Source - User Information |
Secondary |
Source - Host Information |
Tertiary |
Source - Object Information |
Tertiary |
Source - Process Information |
Tertiary |
Source - Group Information |
Tertiary |
Dest - User Information |
Tertiary |
Dest - Host Information |
Primary |
Dest - Object Information |
Primary |
Dest - Group Information |
Tertiary |
Agent - Information |
Primary |
Agent - Host Information |
Primary |
Event Source - Host Information |
Primary |
Event Source - Information |
Tertiary |
Event - Information |
Primary |
Result - Information |
Primary |
Result |
event_result |
event_severity |
---|---|---|
Failure |
F |
6 |
Copyright © 2013 CA.
All rights reserved.
|
|