Detection information

The information that Arc detects. The table shows two types of Category: sensor and endpoint. When the Category is listed as sensor, it means that the detection is based on information that has been extracted from the sensor. When the Category is listed as endpoint, it means that the detection is based on information that has been extracted from the endpoint.

Detection information specific to Mitsubishi Electric

Category Information Supported by * Configuration option
endpoint Nodes aggregation Rn, RnP, RnSF, RnPSF central processing unit (CPU) models always on
endpoint Local state (light-emitting diode (LED) panel information) through these alert types:
  • SIGN:DEV-STATE-CHANGE
  • SIGN:OT_DEVICE-START
  • SIGN:OT_DEVICE-STOP
Rn, RnP, RnSF, RnPSF CPU models always on
endpoint Disconnection of Ethernet cable through: SIGN:DEV-STATE-CHANGE Rn, RnP, RnSF, RnPSF CPU models always on
endpoint Disconnection of module through: SIGN:DEV-STATE-CHANGE RnP, RnPSF CPU models always on
endpoint Program transfer through: SIGN:PROGRAM-TRANSFER Rn, RnP, RnSF, RnPSF CPU models always on
endpoint Program change through: SIGN:PROGRAM-CHANGE Rn CPU models always on
endpoint Firmware change through: SIGN:FIRMWARE-CHANGE Rn, RnP, RnPSF CPU models always on
endpoint Remote login through: SIGN:LOGIN RnSF, RnPSF CPU models always on
endpoint Attach of module through: SIGN:DEV-STATE-CHANGE Rn, RnP, RnSF, RnPSF CPU models always on
endpoint Insertion of SD card through: SIGN:SD-CARD Rn, RnP, RnSF, RnPSF CPU models always on
endpoint Removal of SD card through: SIGN:SD-CARD Rn, RnP, RnSF, RnPSF CPU models always on
endpoint Remote password successful login through: SIGN:LOGIN R120SFCPU, R00CPU, R01CPU, R02CPU, R04CPU, R04ENCPU, R08CPU, R08ENCPU, R08PCPU, R08PSFCPU, R08SFCPU, R16CPU, R16ENCPU, R16PCPU, R16PSFCPU, R16SFCPU, R32CPU, R32ENCPU, R32PCPU, R32PSFCPU, R32SFCPU, R120CPU, R120ENCPU, R120PCPU, R120PSFCPU always on
endpoint Remote password login failure through: SIGN:LOGIN R120SFCPU, R00CPU, R01CPU, R02CPU, R04CPU, R04ENCPU, R08CPU, R08ENCPU, R08PCPU, R08PSFCPU, R08SFCPU, R16CPU, R16ENCPU, R16PCPU, R16PSFCPU, R16SFCPU, R32CPU, R32ENCPU, R32PCPU, R32PSFCPU, R32SFCPU, R120CPU, R120ENCPU, R120PCPU, R120PSFCPU always on
endpoint Boot function security error through: SIGN:BOOT-SECURITY-ERROR Rn, RnP, RnSF, RnPSF CPU models always on

* Reference: MELSEC iQ-R Ethernet User's Manual (Application).

Linux-native detection information

The native detection information in the table below applies to the Linux module hosting Arc Embedded.

Category Information Linux linux icon Configuration option
sensor Traffic monitoring Traffic monitoring
sensor Discovery Discovery
sensor Smart Polling Smart Polling
endpoint media access control (MAC) addresses always on
endpoint internet protocol (IP) addresses always on
endpoint Product name always on
endpoint Vendor always on
endpoint Label/host name always on
endpoint operating system (OS) always on
endpoint Serial number always on
endpoint Local address resolution protocol (ARP) table Local ARP table
endpoint universal serial bus (USB) detections USB detections
endpoint CPU usage node points
endpoint Memory usage node points
endpoint Disk usage node points
endpoint Installed software node points
endpoint Log4j detection node points
endpoint Disk partitions node points
endpoint domain name server (DNS) node points