| Table of Contents | ||||
|---|---|---|---|---|
|
...
The full tag must have three levels. The first two are fixed as uba.varonis. The third level identifies the technology type and it can be dataalert (events generated by datAlert) or alerts (events generated by DatAdvantage).
Technology | Brand | Type |
|---|---|---|
uba | varonis |
|
Therefore, the valid tags include:
...
- Source Port → 13076
- Target Tag → uba.varonis.dataalert
- Select both Stop Processing and Sent without syslog tag
Rule 2 - datAdvantage events
- Source Port → 13076
- Target Tag → uba.varonis.alerts
- Select both Stop Processing and Sent without syslog tag
Related articles
...