Previous Topic: System Call Alert ActionNext Topic: System Call Execution Action


System Call Error Action

The System Call Error action expresses information on system call-related errors. A system call is a request made by any program to the operating system for performing tasks. System calls provide the interface between a process and the operating system. You can map any type of system call error to this action. Less severe events should be mapped to the System Call Warning action. You can map more severe events that warrant immediate action to the System Call Alert action

Information

Level

Source - User Information

Secondary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Tertiary

Dest - Host Information

Primary

Dest - Object Information

Primary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Failure

F

5