Splunk_deploy/deployment-apps/TA-cisco_ios/lookups/cisco_ios_actions.csv

1	vendor_action	action	type	change_type
2	permitted	allowed
3	denied	blocked
4	Start	allowed
5	Stop	allowed
6	Dropping	dropped
7	Created	allowed
8	Deleted	allowed
9	failed	failure
10	fail	failure
11	no-response	failure
12	succeeded	success
13	successful	success
14	assigned	success
15	Reload requested	modified		restart
16	System restarted	modified		restart
17	is not responding.	failure
18	has returned	success
19	timeout	failure
20	no-response	failure
21	success	success
22	SUCCESS	success
23	FAILURE	failure
24	Failed	failure
25	Success	success
26	Succeeded	success
27	blocking	unknown
28	unblocking	unknown
29	joined	unknown
30	left	unknown
31	administratively down	modified
32	administratively up	modified
33	Administratively Down	modified
34	Administratively Up	modified
35	down	unknown
36	up	unknown
37	Inactive	unknown
38	BGP Notification sent	unknown
39	Interface PEER-TERMINATION received	unknown
40	Interface flap	unknown	alert
41	Loading Done	unknown	event
42	Login Authentication Failed	failure
43	Neighbor Down: Dead timer expired	unknown	alert
44	Neighbor Down: Interface down or detached	unknown	alert
45	Non participating	unknown	alert
46	Peer Termination received	unknown	alert
47	Power Controller reports power Imax error detected	unknown	alert
48	Power Controller reports power Tstart error detected	unknown	alert
49	Power given, but Power Controller does not report Power Good	unknown	alert
50	TCP connection closed by peer	unknown	alert
51	holding time expired	unknown	alert
52	interface down	unknown	alert
53	new adjacency	unknown	event
54	peer restarted	unknown	event
55	retry limit exceeded	unknown	alert
56	logged command	modified		filesystem
57	err-disable	blocked
58	Packet not authorized on port	blocked
59	Message unauthorized on port	blocked
60	IP Theft	blocked
61	MAC Theft	blocked
62	MAC_AND_IP Theft	blocked
63	add	created
64	remove	deleted