| Table of Contents | ||||
|---|---|---|---|---|
|
Introduction
The tags beginning with mail.mimecast identify events generated by Mimecast.
Valid tags and data tables
The full tag must have 4 levels. The first two are fixed as mail.mimecast. The third level identifies the type of events sent, and the fourth level indicates the event subtype
Technology | Brand | Type | Subtype |
|---|---|---|---|
cloud | aws | guardduty |
|
These are the valid tags and corresponding data tables that will receive the parsers' data:
Tag | Data table |
|---|---|
cloud.aws.guardduty.events | cloud.aws.guardduty.events |
cloud.aws.guardduty.findings | cloud.aws.guardduty.findings |