Trying to obtain a Symantec Event Code list to write rules by
Last Updated September 16, 2014
For example a customer is trying to write some rules around various 3rd party product events such as Juniper NSM. For Example, they find one particular event appears to be a Dismiss NSM activity with the Symantec Event Code of 3277, but they wanted to know what Symantec Event Code corresponded to Allow? Is there a public listing of all Symantec Event Codes that would be helpful here in order to create rules.
A public list is not available as these are mapped by Deepsight not SSIM there are over 40K mapped events for 170K+ applications and types. They might be able to get more in depth information if they had a full Deepsight license to get some information, but not actual event codes.
Imported Document ID: TECH162723
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe