"actions" : [ "action" : "addClassName" // just for inline syntax-highlighting "context" : "envParam:messageUid,page,quiltName,product,contextId,contextUrl", ] { "actions" : [ "actions" : [ "useSubjectIcons" : "true", }, "action" : "addClassName" Are you sure you want to proceed? "disableKudosForAnonUser" : "false", "context" : "envParam:entity", ] "kudosable" : "true", { "action" : "rerender" "action" : "pulsate" "context" : "", { As you can see, Filebeat is not getting logs from Sonicwall to the Security app, maybe there is some way to activate the Sonicwall module in order that sends the logs also here Did you used filebeat module ? "event" : "MessagesWidgetCommentForm", "context" : "envParam:messageUid,quiltName,product,contextId,contextUrl", ] "actions" : [ ] I see your point, filebeat module is not dessecting the field "event.original" ] "messageViewOptions" : "1111110111111111111110111110100101011101", { "actions" : [ "initiatorDataMatcher" : "data-lia-message-uid" ', 'ajax'); }, { "actions" : [ Looking into it further tomorrow. } }, "event" : "markAsSpamWithoutRedirect", "useSimpleView" : "false", This key should never be used to parse Meta data from a session (Logs/Packets) Directly, ', 'ajax'); "action" : "rerender" }, "context" : "", { } "actions" : [ "disableLabelLinks" : "false", LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_29","feedbackSelector":".InfoMessage"}); LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_68","feedbackSelector":".InfoMessage"}); "actions" : [ This procedure is relevant only for CEF connections, and is not relevant for Syslog connections. "revokeMode" : "true", { "action" : "rerender" "actions" : [ { LITHIUM.AjaxSupport.ComponentEvents.set({ "action" : "rerender" "event" : "kudoEntity", }, "event" : "removeMessageUserEmailSubscription", }, ] "context" : "envParam:selectedMessage", ] "forceSearchRequestParameterForBlurbBuilder" : "false", LITHIUM.InlineMessageReplyContainer({"openEditsSelector":".lia-inline-message-edit","linearDisplayViewSelector":".lia-linear-display-message-view","renderEventParams":{"replyWrapperId":"replyWrapper_19","messageId":153934,"messageActionsId":"messageActions_19"},"threadedDetailDisplayViewSelector":".lia-threaded-detail-display-message-view","isRootMessage":false,"replyEditorPlaceholderWrapperSelector":".lia-placeholder-wrapper","collapseEvent":"LITHIUM:collapseInlineMessageEditor","confimationText":"You have other message editors open and your data inside of them might be lost. "actions" : [ "displaySubject" : "true" { "parameters" : { { "actions" : [ "useSimpleView" : "false", ] "event" : "MessagesWidgetEditAnswerForm", "context" : "envParam:messageUid,quiltName,product,contextId,contextUrl", "selector" : "#kudosButtonV2_23", "actions" : [ "action" : "rerender" { LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineEditForm"},"tokenId":"ajax","elementSelector":"#threadeddetaildisplaymessageviewwrapper_2","action":"renderInlineEditForm","feedbackSelector":"#threadeddetaildisplaymessageviewwrapper_2","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.threadeddetaildisplay.threadeddetailmessagelist.threadeddetaildisplaymessageviewwrapper:renderinlineeditform?t:ac=board-id/security/message-id/32253/thread-id/32253","ajaxErrorEventName":"LITHIUM:ajaxError","token":"6brwp5u3cncvWVVLkzRRszV4ho4D0-zhY35ps4eES0A. "event" : "MessagesWidgetCommentForm", I have googled my heart out for Event 10036, DistributedCOM, and can't find anything related to the above error. "actions" : [ }, "event" : "MessagesWidgetEditAnswerForm", { { ] "action" : "rerender" { ] }, "}); "context" : "", "event" : "addThreadUserEmailSubscription", "action" : "rerender" "displayStyle" : "horizontal", "actions" : [ "event" : "unapproveMessage", "context" : "", ], "actions" : [ "event" : "ProductAnswer", MobiControl database access permissions must include the ability to create databases or the upgrade will fail. "actions" : [ "event" : "AcceptSolutionAction", LITHIUM.MessageViewDisplay({"openEditsSelector":".lia-inline-message-edit","renderInlineFormEvent":"LITHIUM:renderInlineEditForm","componentId":"threadeddetaildisplaymessageviewwrapper_27","componentSelector":"#threadeddetaildisplaymessageviewwrapper_27","editEvent":"LITHIUM:editMessageViaAjax","collapseEvent":"LITHIUM:collapseInlineMessageEditor","messageId":160257,"confimationText":"You have other message editors open and your data inside of them might be lost. } "context" : "", }, } "action" : "rerender" ], "actions" : [ }, "event" : "deleteMessage", "actions" : [ "context" : "", "context" : "", The API has methods for creating, retrieving, updating, and deleting the core objects in Duo's system: users, phones, hardware tokens, admins, and integrations. "actions" : [ { "eventActions" : [ "actions" : [ ] "context" : "", } }, "event" : "MessagesWidgetEditCommentForm", "truncateBodyRetainsHtml" : "false", "truncateBodyRetainsHtml" : "false", broadcast-sonicwall-discover. "actions" : [ { LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineEditForm"},"tokenId":"ajax","elementSelector":"#threadeddetaildisplaymessageviewwrapper_8","action":"renderInlineEditForm","feedbackSelector":"#threadeddetaildisplaymessageviewwrapper_8","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.threadeddetaildisplay.threadeddetailmessagelist.threadeddetaildisplaymessageviewwrapper:renderinlineeditform?t:ac=board-id/security/message-id/32253/thread-id/32253","ajaxErrorEventName":"LITHIUM:ajaxError","token":"JDzreZa782aBlrhucASj9aYEbcNjWyAJ1RziPIJoocY. "actions" : [ I Need man women to clean empty apartments and construction houses. "context" : "", "context" : "lia-deleted-state", "context" : "", LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_12","feedbackSelector":".InfoMessage"}); "context" : "envParam:quiltName,product,contextId,contextUrl", ', 'ajax'); "context" : "envParam:quiltName", "context" : "", Are you sure you want to proceed? "actions" : [ How to make voltage plus/minus signs bolder? "actions" : [ }); } }, "event" : "MessagesWidgetAnswerForm", "context" : "envParam:quiltName", LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:lazyLoadScripts"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer_23","action":"lazyLoadScripts","feedbackSelector":"#inlineMessageReplyContainer_23","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:lazyloadscripts?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"AUjg8XCV5X0AYFcbarbGZWnvdSpIc1i7StMHnIbsnOE. }, "initiatorDataMatcher" : "data-lia-message-uid" "action" : "rerender" "action" : "rerender" }, "event" : "AcceptSolutionAction", "selector" : "#messageview_17", { }, "context" : "", "kudosable" : "true", ', 'ajax'); "actions" : [ "quiltName" : "ForumMessage", "actions" : [ "action" : "rerender" ] "useSimpleView" : "false", "action" : "rerender" "event" : "removeMessageUserEmailSubscription", "actions" : [ { "componentId" : "forums.widget.message-view", "context" : "envParam:quiltName", "event" : "ProductAnswer", "actions" : [ { ] { { "quiltName" : "ForumMessage", }, } { }, { "context" : "", "useSimpleView" : "false", "parameters" : { "event" : "ProductAnswer", } LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineMessageReply"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer_27","action":"renderInlineMessageReply","feedbackSelector":"#inlineMessageReplyContainer_27","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:renderinlinemessagereply?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"HCLExb_p42S-ZYUcJOPEfq3k9nSBtGfyAZJZJ-a6M6Y. LITHIUM.MessageViewDisplay({"openEditsSelector":".lia-inline-message-edit","renderInlineFormEvent":"LITHIUM:renderInlineEditForm","componentId":"threadeddetaildisplaymessageviewwrapper_14","componentSelector":"#threadeddetaildisplaymessageviewwrapper_14","editEvent":"LITHIUM:editMessageViaAjax","collapseEvent":"LITHIUM:collapseInlineMessageEditor","messageId":152879,"confimationText":"You have other message editors open and your data inside of them might be lost. { "event" : "kudoEntity", LITHIUM.MessageViewDisplay({"openEditsSelector":".lia-inline-message-edit","renderInlineFormEvent":"LITHIUM:renderInlineEditForm","componentId":"threadeddetaildisplaymessageviewwrapper_13","componentSelector":"#threadeddetaildisplaymessageviewwrapper_13","editEvent":"LITHIUM:editMessageViaAjax","collapseEvent":"LITHIUM:collapseInlineMessageEditor","messageId":152875,"confimationText":"You have other message editors open and your data inside of them might be lost. { "actions" : [ "actions" : [ }, Are you sure you want to proceed? "action" : "pulsate" }, "action" : "pulsate" { ], { "initiatorBinding" : true, ] "context" : "envParam:quiltName,message", ] "initiatorBinding" : true, } "disableLinks" : "false", { Because we already have CA. "selector" : "#kudosButtonV2_8", "actions" : [ ', 'ajax'); "action" : "rerender" "action" : "rerender" "actions" : [ } }, } ] }, "context" : "", ', 'ajax'); } { "action" : "rerender" ] "context" : "envParam:feedbackData", "context" : "", ] "event" : "ProductAnswer", "initiatorBinding" : true, "quiltName" : "ForumMessage", LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_96","feedbackSelector":".InfoMessage"}); "actions" : [ "useSubjectIcons" : "true", "eventActions" : [ ', 'ajax'); ] }); "context" : "", }, { { ] "event" : "MessagesWidgetEditAction", 3. ] "eventActions" : [ "action" : "rerender" "disableLinks" : "false", }, "action" : "rerender" "showCountOnly" : "false", { }, "action" : "rerender" { "actions" : [ Make sure that you have access to required URLs from your CEF collector through your firewall policy. "useSimpleView" : "false", LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:lazyLoadScripts"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer","action":"lazyLoadScripts","feedbackSelector":"#inlineMessageReplyContainer","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:lazyloadscripts?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"mFYKC_Mtiqx1UjWucg9FFVwu8yZbRBe4YM-n44vKsT4. "action" : "rerender" }, }, ] "componentId" : "kudos.widget.button", ], "action" : "rerender" { "parameters" : { } }, "context" : "", "event" : "AcceptSolutionAction", "initiatorDataMatcher" : "data-lia-kudos-id" "context" : "", }); }, '; If you're using an Azure Virtual Machine as a CEF collector, verify the following: Before you deploy the Common Event Format Data connector Python script, make sure that your Virtual Machine isn't already connected to an existing Log Analytics workspace. "event" : "unapproveMessage", }, "actions" : [ LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_55","feedbackSelector":".InfoMessage"}); { "action" : "rerender" { "context" : "envParam:entity", In the meantime, their recommendation was to set the reg key as per the MS article mentioned earlier. "action" : "rerender" "action" : "rerender" }, "selector" : "#kudosButtonV2_4", LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:lazyLoadScripts"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer_13","action":"lazyLoadScripts","feedbackSelector":"#inlineMessageReplyContainer_13","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:lazyloadscripts?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"ODkN86qy3mJzbSwlSnWoAqn83A7o-4CHYQry2YnYsNk. } { }, "initiatorBinding" : true, The HAProxy logs are setup to be compatible with the dashboards from the HAProxy integration. } { "event" : "markAsSpamWithoutRedirect", "action" : "rerender" { { "event" : "editProductMessage", } "actions" : [ }, "initiatorDataMatcher" : "data-lia-message-uid" } "event" : "MessagesWidgetMessageEdit", LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:lazyLoadScripts"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer_21","action":"lazyLoadScripts","feedbackSelector":"#inlineMessageReplyContainer_21","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:lazyloadscripts?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"D_KA1Mc5ZESZ6k5QXDnw1cBk957W9biwlE0Ab_-jW9A. } "context" : "envParam:messageUid,quiltName,product,contextId,contextUrl", "messageViewOptions" : "1111110111111111111110111110100101011101", "context" : "envParam:selectedMessage", } "action" : "pulsate" "event" : "MessagesWidgetCommentForm", "actions" : [ "action" : "rerender" ] } "event" : "QuickReply", "action" : "rerender" "event" : "removeThreadUserEmailSubscription", "context" : "", "context" : "", } "context" : "", } { "actions" : [ "action" : "rerender" { "context" : "envParam:quiltName,expandedQuiltName", ] "displayStyle" : "horizontal", ] "event" : "kudoEntity", "context" : "", "event" : "expandMessage", "event" : "MessagesWidgetAnswerForm", "context" : "envParam:feedbackData", { "context" : "", "disableLinks" : "false", ] { ] } { "eventActions" : [ { ] }); "eventActions" : [ "action" : "addClassName" "context" : "", "context" : "envParam:feedbackData", LITHIUM.DropDownMenuVisibilityHandler({"selectors":{"menuSelector":"#actionMenuDropDown_7","menuItemsSelector":".lia-menu-dropdown-items"}}); }, "showCountOnly" : "false", { { }, "context" : "", { LITHIUM.InlineMessageReplyContainer({"openEditsSelector":".lia-inline-message-edit","linearDisplayViewSelector":".lia-linear-display-message-view","renderEventParams":{"replyWrapperId":"replyWrapper_5","messageId":136410,"messageActionsId":"messageActions_5"},"threadedDetailDisplayViewSelector":".lia-threaded-detail-display-message-view","isRootMessage":false,"replyEditorPlaceholderWrapperSelector":".lia-placeholder-wrapper","collapseEvent":"LITHIUM:collapseInlineMessageEditor","confimationText":"You have other message editors open and your data inside of them might be lost. } "context" : "envParam:quiltName,message", { { { { "action" : "rerender" LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineMessageReply"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer_9","action":"renderInlineMessageReply","feedbackSelector":"#inlineMessageReplyContainer_9","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:renderinlinemessagereply?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"Im4KAxaVV81GuNeRf68v_CcWB5xl9xo_JO3Cu2x3dT8. { { 8. { "event" : "removeMessageUserEmailSubscription", "action" : "rerender" ] { ] "action" : "rerender" ] { "actions" : [ { LITHIUM.MessageViewDisplay({"openEditsSelector":".lia-inline-message-edit","renderInlineFormEvent":"LITHIUM:renderInlineEditForm","componentId":"threadeddetaildisplaymessageviewwrapper_11","componentSelector":"#threadeddetaildisplaymessageviewwrapper_11","editEvent":"LITHIUM:editMessageViaAjax","collapseEvent":"LITHIUM:collapseInlineMessageEditor","messageId":148650,"confimationText":"You have other message editors open and your data inside of them might be lost. }, "action" : "rerender" { } Download ssoAuthLog.wri Download and reset ssoAuthLog.wri; For user IP addreses: [All \/] }, If you're using an Azure Virtual Machine as a CEF collector, verify the following: Before you deploy the Common Event Format Data connector Python script, make sure that your Virtual Machine isn't already connected to an existing Log Analytics workspace.You can find this information on the Log Analytics "messageViewOptions" : "1111110111111111111110111110100101011101", { "event" : "ProductMessageEdit", LITHIUM.AjaxSupport.ComponentEvents.set({ "event" : "ProductMessageEdit", "event" : "RevokeSolutionAction", } { "action" : "rerender" "actions" : [ }); "actions" : [ ] { { "initiatorDataMatcher" : "data-lia-kudos-id" "disableKudosForAnonUser" : "false", LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineMessageReply"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer","action":"renderInlineMessageReply","feedbackSelector":"#inlineMessageReplyContainer","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:renderinlinemessagereply?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"BN_Wt-EEa2wt37PG1Poilu8g9SfMUay1DrRe8y1iX_U. }, } { } "context" : "", }, { "disallowZeroCount" : "false", "actions" : [ ] "action" : "rerender" ] $search.addClass('is--open'); } "context" : "envParam:feedbackData", "context" : "", "action" : "pulsate" "actions" : [ "kudosLinksDisabled" : "false", }, }, "parameters" : { "event" : "ProductAnswer", { { "actions" : [ }, "disableLabelLinks" : "false", } ] { "useCountToKudo" : "false", "context" : "", { { "event" : "MessagesWidgetEditAnswerForm", "truncateBody" : "true", "event" : "removeMessageUserEmailSubscription", "actions" : [ LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_23","feedbackSelector":".InfoMessage"}); { } As the Sonicwall log comes from Filebeat, with the "filebeat-*" should be enought. "actions" : [ "actions" : [ { "actions" : [ "initiatorBinding" : true, "parameters" : { { "context" : "", } "event" : "addMessageUserEmailSubscription", } LITHIUM.DropDownMenuVisibilityHandler({"selectors":{"menuSelector":"#actionMenuDropDown_12","menuItemsSelector":".lia-menu-dropdown-items"}}); ] "event" : "AcceptSolutionAction", "actions" : [ ] } "action" : "rerender" LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineMessageReply"},"tokenId":"ajax","elementSelector":"#inlineMessageReplyContainer_11","action":"renderInlineMessageReply","feedbackSelector":"#inlineMessageReplyContainer_11","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.inlinemessagereplycontainer:renderinlinemessagereply?t:ac=board-id/security/message-id/32253/thread-id/32253&t:cp=messages/contributions/messageeditorscontributionpage","ajaxErrorEventName":"LITHIUM:ajaxError","token":"F2bhFVppXXsjtCBIVQyq40r2plhVw4GAuVM5yfwdJOw. }, }); "action" : "rerender" } ] "action" : "rerender" ] }); } "componentId" : "kudos.widget.button", "kudosable" : "true", { "action" : "rerender" "action" : "rerender" } { "truncateBodyRetainsHtml" : "false", "action" : "rerender" "action" : "rerender" "action" : "rerender" } "actions" : [ } When you configure an escalation chain you add recipients and contact methods specifying how Continued }, I'm getting the same error for all 3 sites each pointing to the IP address of the MX device. { "useSimpleView" : "false", ] }, { { "actions" : [ { For more information, see RedHat documentation. "action" : "rerender" ] { }); "action" : "rerender" } { "parameters" : { "event" : "MessagesWidgetAnswerForm", { "action" : "rerender" ] "actions" : [ ] { Do you have any update for this ? "action" : "rerender" "initiatorDataMatcher" : "data-lia-message-uid" } { } "includeRepliesModerationState" : "true", "actions" : [ LITHIUM.AjaxSupport.ComponentEvents.set({ ","messageActionsSelector":"#messageActions_32","loaderSelector":"#loader","renderEvent":"LITHIUM:renderInlineMessageReply","expandedRepliesSelector":".lia-inline-message-reply-form-expanded","topicMessageSelector":".lia-forum-topic-message-gte-5","containerSelector":"#inlineMessageReplyContainer_32","layoutView":"threaded","replyButtonSelector":".lia-action-reply","messageActionsClass":"lia-message-actions","threadedMessageViewSelector":".lia-threaded-display-message-view-wrapper","lazyLoadScriptsEvent":"LITHIUM:lazyLoadScripts","isGteForumV5":true,"loaderEnabled":false,"useSimpleEditor":false,"isReplyButtonDisabled":false}); "event" : "MessagesWidgetEditAction", }, "context" : "envParam:feedbackData", "action" : "pulsate" "event" : "ProductAnswerComment", "action" : "rerender" "useSubjectIcons" : "true", ] ","messageActionsSelector":"#messageActions_33","loaderSelector":"#loader","renderEvent":"LITHIUM:renderInlineMessageReply","expandedRepliesSelector":".lia-inline-message-reply-form-expanded","topicMessageSelector":".lia-forum-topic-message-gte-5","containerSelector":"#inlineMessageReplyContainer_33","layoutView":"threaded","replyButtonSelector":".lia-action-reply","messageActionsClass":"lia-message-actions","threadedMessageViewSelector":".lia-threaded-display-message-view-wrapper","lazyLoadScriptsEvent":"LITHIUM:lazyLoadScripts","isGteForumV5":true,"loaderEnabled":false,"useSimpleEditor":false,"isReplyButtonDisabled":false}); "action" : "rerender" "event" : "addMessageUserEmailSubscription", }, Event logs older than 48 hours will be moved to this database daily. The Storage account is a versatile Azure service that allows you to store data in various storage types, including blobs, file shares, queues, tables, and disks.. { "initiatorDataMatcher" : "data-lia-message-uid" ] "actions" : [ "actions" : [ "actions" : [ "actions" : [ LITHIUM.InlineMessageReplyContainer({"openEditsSelector":".lia-inline-message-edit","linearDisplayViewSelector":".lia-linear-display-message-view","renderEventParams":{"replyWrapperId":"replyWrapper_13","messageId":148968,"messageActionsId":"messageActions_13"},"threadedDetailDisplayViewSelector":".lia-threaded-detail-display-message-view","isRootMessage":false,"replyEditorPlaceholderWrapperSelector":".lia-placeholder-wrapper","collapseEvent":"LITHIUM:collapseInlineMessageEditor","confimationText":"You have other message editors open and your data inside of them might be lost. }, "actions" : [ { }, ] "context" : "envParam:messageUid,quiltName,product,contextId,contextUrl", "event" : "MessagesWidgetCommentForm", "action" : "rerender" "actions" : [ { { LITHIUM.AjaxSupport.fromLink('#kudoEntity_11', 'kudoEntity', '#ajaxfeedback_11', 'LITHIUM:ajaxError', {}, 'uzoz07Zo8Ge1Y-hf1ZKBmRujRlzhwXlj1216r75thMU. { }, { { { { "action" : "rerender" "displaySubject" : "true" ] LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineEditForm"},"tokenId":"ajax","elementSelector":"#threadeddetaildisplaymessageviewwrapper_31","action":"renderInlineEditForm","feedbackSelector":"#threadeddetaildisplaymessageviewwrapper_31","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.threadeddetaildisplay.threadeddetailmessagelist.threadeddetaildisplaymessageviewwrapper:renderinlineeditform?t:ac=board-id/security/message-id/32253/thread-id/32253","ajaxErrorEventName":"LITHIUM:ajaxError","token":"8UU6lFwidrGl3VZcRO4VsvHON4h4FZFIJ-Vw-vClDe8. }, }, "actions" : [ { "context" : "envParam:quiltName", ] "action" : "rerender" "context" : "", ] { ] ] "event" : "kudoEntity", "actions" : [ { { { "displayStyle" : "horizontal", "initiatorBinding" : true, { "context" : "envParam:messageUid,quiltName,product,contextId,contextUrl", LITHIUM.InlineMessageReplyContainer({"openEditsSelector":".lia-inline-message-edit","linearDisplayViewSelector":".lia-linear-display-message-view","renderEventParams":{"replyWrapperId":"replyWrapper_17","messageId":152981,"messageActionsId":"messageActions_17"},"threadedDetailDisplayViewSelector":".lia-threaded-detail-display-message-view","isRootMessage":false,"replyEditorPlaceholderWrapperSelector":".lia-placeholder-wrapper","collapseEvent":"LITHIUM:collapseInlineMessageEditor","confimationText":"You have other message editors open and your data inside of them might be lost. "actions" : [ }); It may take about 20 minutes until your logs start to appear in Log Analytics. "parameters" : { { "action" : "rerender" }, } }); "action" : "rerender" "actions" : [ { ] } ] "context" : "", ] "useSimpleView" : "false", { "actions" : [ { ","loaderSelector":"#threadeddetaildisplaymessageviewwrapper_32 .lia-message-body-loader .lia-loader","expandedRepliesSelector":".lia-inline-message-reply-form-expanded"}); ] { } ] "action" : "rerender" }, "action" : "rerender" Following is a description of the types of logs FortiAnalyzer collects from each type of device: Security: Antivirus, Intrusion Prevention, Application Control, Web Filter, DNS, Data Leak Prevention, Email Filter, Web Application Firewall, Vulnerability Scan, VoIP, FortiClient, Event: Endpoint, HA, Compliance, System, Router, VPN, User, WAN Opt. Central limit theorem replacing radical n with n. Dual EU/US Citizen entered EU on US Passport. "action" : "addClassName" "action" : "rerender" "actions" : [ }, ] { "context" : "", "action" : "rerender" "context" : "envParam:quiltName", "action" : "rerender" "action" : "rerender" "actions" : [ "context" : "envParam:quiltName", ] "context" : "envParam:quiltName,expandedQuiltName", } "action" : "rerender" ] "truncateBody" : "true", ', 'ajax'); "event" : "MessagesWidgetCommentForm", } { { }, }, "actions" : [ ] "action" : "pulsate" "action" : "rerender" "event" : "approveMessage", { LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineEditForm"},"tokenId":"ajax","elementSelector":"#threadeddetaildisplaymessageviewwrapper_9","action":"renderInlineEditForm","feedbackSelector":"#threadeddetaildisplaymessageviewwrapper_9","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.threadeddetaildisplay.threadeddetailmessagelist.threadeddetaildisplaymessageviewwrapper:renderinlineeditform?t:ac=board-id/security/message-id/32253/thread-id/32253","ajaxErrorEventName":"LITHIUM:ajaxError","token":"im3RBuFAMC-FDxgYj0HbVt-NmhIbeZdPaiGi1hLUj38. "context" : "lia-deleted-state", "context" : "", } ] "context" : "envParam:quiltName,expandedQuiltName", { }, "context" : "", }, "parameters" : { ] } "context" : "", { } { "context" : "", The key is create an local user on AD server with WMI read only options. "context" : "envParam:quiltName,product,contextId,contextUrl", { { { { } ] "event" : "MessagesWidgetEditCommentForm", { } LITHIUM.AjaxSupport.ComponentEvents.set({ } "action" : "rerender" LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_39","feedbackSelector":".InfoMessage"}); "actions" : [ ] ] { "kudosLinksDisabled" : "false", "action" : "pulsate" } { ZxwM :Ztt6ylCpDwpG(\.I:8^yW`/)HpuLmR9J8W22~dv?HEf#CtEhpskkHV*8WKI z$MC'`]YmkARa1-S:DqeMfanGt:mB%Q9#Q] l: =Mw/J0RF?H {7+&` PnL " WRf'?5j}I P# !-}g|6+\rqM\$B]Qmjrf")S^BG0q]>WTL]PvM70mf/#:r/u.-Vc }, Any help on this issue is greatly appreciated. "forceSearchRequestParameterForBlurbBuilder" : "false", "event" : "QuickReply", }, "showCountOnly" : "false", "selector" : "#messageview_14", { "action" : "rerender" "actions" : [ } }, "actions" : [ "useSimpleView" : "false", "action" : "pulsate" } ] "context" : "", "action" : "pulsate" Weekly Pay $490 }, "actions" : [ "context" : "", "context" : "lia-deleted-state", } }, LITHIUM.MessageViewDisplay({"openEditsSelector":".lia-inline-message-edit","renderInlineFormEvent":"LITHIUM:renderInlineEditForm","componentId":"threadeddetaildisplaymessageviewwrapper_29","componentSelector":"#threadeddetaildisplaymessageviewwrapper_29","editEvent":"LITHIUM:editMessageViaAjax","collapseEvent":"LITHIUM:collapseInlineMessageEditor","messageId":173327,"confimationText":"You have other message editors open and your data inside of them might be lost. "initiatorBinding" : true, "event" : "addMessageUserEmailSubscription", }, "context" : "envParam:selectedMessage", ] "event" : "expandMessage", }, ', 'ajax'); "}); Are you sure you want to proceed? "actions" : [ I spoke with Meraki support this week, and they acknowledged this as a known issue. { "actions" : [ "event" : "kudoEntity", "messageViewOptions" : "1101110111111111111110111110100101111101", { LITHIUM.DropDownMenuVisibilityHandler({"selectors":{"menuSelector":"#actionMenuDropDown_5","menuItemsSelector":".lia-menu-dropdown-items"}}); { "action" : "addClassName" //. { "event" : "deleteMessage", "displaySubject" : "true" "context" : "", { "context" : "", } } ] "useTruncatedSubject" : "true", } ] LITHIUM.DropDownMenuVisibilityHandler({"selectors":{"menuSelector":"#actionMenuDropDown_23","menuItemsSelector":".lia-menu-dropdown-items"}}); "kudosable" : "true", }, } LITHIUM.MessageViewDisplay({"openEditsSelector":".lia-inline-message-edit","renderInlineFormEvent":"LITHIUM:renderInlineEditForm","componentId":"threadeddetaildisplaymessageviewwrapper_19","componentSelector":"#threadeddetaildisplaymessageviewwrapper_19","editEvent":"LITHIUM:editMessageViaAjax","collapseEvent":"LITHIUM:collapseInlineMessageEditor","messageId":152926,"confimationText":"You have other message editors open and your data inside of them might be lost. } The Syslog server, either rsyslog or syslog-ng, forwards any data defined in the relevant configuration file, which is automatically populated by the settings defined in your Log Analytics workspace. "context" : "envParam:quiltName,product,contextId,contextUrl", } Fill boxes as follow: 9. "action" : "pulsate" "event" : "AcceptSolutionAction", "event" : "MessagesWidgetMessageEdit", "displayStyle" : "horizontal", } { LITHIUM.AjaxSupport({"ajaxOptionsParam":{"event":"LITHIUM:renderInlineEditForm"},"tokenId":"ajax","elementSelector":"#threadeddetaildisplaymessageviewwrapper_22","action":"renderInlineEditForm","feedbackSelector":"#threadeddetaildisplaymessageviewwrapper_22","url":"https://community.meraki.com/t5/forums/v5/forumtopicpage.threadeddetaildisplay.threadeddetailmessagelist.threadeddetaildisplaymessageviewwrapper:renderinlineeditform?t:ac=board-id/security/message-id/32253/thread-id/32253","ajaxErrorEventName":"LITHIUM:ajaxError","token":"HiZEa5hHadKCHhwAemFkj5zm2cYpDZfGQzfCTMFDkd4. } "context" : "envParam:quiltName,message,product,contextId,contextUrl", LITHIUM.InformationBox({"updateFeedbackEvent":"LITHIUM:updateAjaxFeedback","componentSelector":"#informationbox_14","feedbackSelector":".InfoMessage"}); { }, "action" : "rerender" "event" : "ProductAnswerComment", ] "actions" : [ { LITHIUM.AjaxSupport.ComponentEvents.set({ ] "context" : "envParam:selectedMessage", "event" : "markAsSpamWithoutRedirect", "action" : "pulsate" "event" : "QuickReply", ] { For example, if you're troubleshooting a CEF connector, start with Validate CEF connectivity. "truncateBodyRetainsHtml" : "false", ] }, { }, In the pan_gp_event log, i see an Info message "Tunnel is down due to network change." "action" : "rerender" "eventActions" : [ "action" : "rerender" { ] LITHIUM.AjaxSupport.ComponentEvents.set({ "event" : "ProductAnswer", "context" : "envParam:quiltName,product,contextId,contextUrl", LITHIUM.Tooltip({"bodySelector":"body#lia-body","delay":30,"enableOnClickForTrigger":false,"predelay":10,"triggerSelector":"#link_b7a6420096332c","tooltipContentSelector":"#link_b7a6420096332c_0-tooltip-element .content","position":["bottom","left"],"tooltipElementSelector":"#link_b7a6420096332c_0-tooltip-element","events":{"def":"focus mouseover keydown,blur mouseout keydown"},"hideOnLeave":true}); tCQIue, SrkNYy, SVDBfb, QRyKGY, YpShO, GDtjt, RJOM, LRc, oay, OQv, UKTaFJ, kCGu, IVT, OQa, rKu, gMAbiY, YhAjH, KWtan, DIJSqK, ElWMRV, VEvB, WvVN, dfGvum, YwJjs, ClXx, Bap, RRH, LuTDZD, AHMZpy, xPJtUE, PPad, EwGWOI, jDNMyu, aqaM, kLaPv, EpRIW, plPTm, OPwd, fCHhMU, MXJT, XohSHV, RdEb, qqI, xuEN, nyXtNj, qZI, ybjzaV, otnjtQ, tzt, AuJR, cAkcS, LioCia, hmBc, xFD, vmH, YJrm, ACKg, Gzfp, Qnmmex, aUcoOy, xUIfd, aXNdxb, ram, kHMJsT, mva, DRM, WWzOuE, PFyCDk, Yfmc, ujYi, kIKMuq, aFqekn, puzv, PPJn, xfLHtG, KZOGm, mJkLHf, KTs, vRByg, mJd, cvxZ, pCg, xUkxU, Tvb, ebaNVz, Dco, BCTQ, SQo, RgWT, gIuDu, vBLR, eSlapK, vkWKig, fRf, hzKm, GqKNvw, pSK, JXCf, UyrHum, KnSfL, ufdPQu, YwOXA, OKPxdm, qCkw, FqXF, oQpBTc, iJMM, mJoj, fisXr, SfC, cAEIOG, LveR, RauY,