Values of fields in the body of CEF messages for classes of Rules group events

In the body of CEF messages for classes of Rules group events, you can use keys in accordance with their semantics (see the table below).

Permissible values of the fields for classes of Rules group events

Key	Value
cs1	Rule name.
cs1Label	Its value is always RuleName.
cn1	Rule ID.
cn1Label	Its value is always RuleId.
act	Action on the rule (created / settings changed / deleted / priority changed).

Each class of Rules group events can contain only keys that are relevant to it (see the table below).

Relevant keys for classes of Rules group events

Event class	Relevant keys
LMS_EV_RULE_CHANGED	cs1, cs1Label, cn1, cn1Label, act
LMS_EV_ALL_RULES_IMPORTED	No value

Page top