When a MAPS rule is triggered, how is the severity (MAPS-1001/2/3/4) defined?

[jan_crijns]

I would like to understand what Fabirc OS Message Reference is assigned to an event in RASLog message, triggered by a MAPS rule.

For example, rule defALL_D_PORTSCRC_2 is triggered and writes an event in RASLog. Wil this be a CRITICAL (so with reference MAPS-1001), a ERROR (so witch reference MAPS-1002), a WARNING (so with reference MAPS-1003) or a INFO (so with reference MAPS-1004)?

Is this information somewhere documented for all default MAPS policies?

Thanks for your support in this.