Unknown
The Unknown category contains events that are not parsed and therefore cannot be categorized.
The following table describes the low-level event categories and associated severity levels for the Unknown category.
Table 1: Low-level Categories and Severity Levels for the Unknown Category
Low-level event category | Category ID | Description | Severity level (0 - 10) |
|---|---|---|---|
Unknown | 10001 | Indicates an unknown event. | 3 |
Unknown Snort Event | 10002 | Indicates an unknown Snort event. | 3 |
Unknown Dragon Event | 10003 | Indicates an unknown Dragon event. | 3 |
Unknown Pix Firewall Event | 10004 | Indicates an unknown Cisco Private Internet Exchange (PIX) Firewall event. | 3 |
Unknown Tipping Point Event | 10005 | Indicates an unknown HP TippingPoint event. | 3 |
Unknown Windows Auth Server Event | 10006 | Indicates an unknown Windows Auth Server event. | 3 |
Unknown Nortel Event | 10007 | Indicates an unknown Nortel event. | 3 |
Stored | 10009 | Indicates an unknown stored event. | 3 |
Behavioral | 11001 | Indicates an unknown behavioral event. | 3 |
Threshold | 11002 | Indicates an unknown threshold event. | 3 |