Versions Compared

Old Version 3

changes.mady.by.user Former user

Saved on

compared with

New Version 4

changes.mady.by.user Juan Tomás Alonso Nieto

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note

Extra columns

Fields marked as Extra in the table below are not shown by default in data tables and need to be explicitly requested in the query. You can find them marked as Extra when you perform a query so they can be easily identified. Learn more about this in Selecting unrevealed columns.

Field

Data type

Extra fields

eventdate

timestamp

-

source

str

-

signature

str

-srcIp

source_ip

ip4

-srcHost

source_hostname

str

-destMac

destination_mac

str

-srcMac

source_mac

str

-

description

str

-leaseIpAddress

lease_ip

str

-leaseHardwareAddress

lease_mac

str

-

message

str

-

rawTagged

str

-

rawMessage

str

-

hostchain

str

✓

tag

str

✓

...

Rw ui tabs macro
Rw tab
titleTables 1-3

[ ddi.infoblox.dhcp.dhcpd ] [ dhcp.bluecat.dhcpd ] [ dhcp.infoblox.stdout ]

Anchor
ddi.infoblox.dhcp.dhcpd
ddi.infoblox.dhcp.dhcpd
ddi.infoblox.dhcp.dhcpd

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'ddi.infoblox.dhcp.dhcpd'

str

signature

message_type

 

strsrcIp

source_ip

-

Code Block
null(ip4('0.0.0.0'))

ip4srcHost

source_hostname

-

Code Block
null('')

strdestMac

destination_mac

-

Code Block
null('')

strsrcMac

source_mac

-

Code Block
null('')

str

description

-

Code Block
null('')

strleaseIpAddress

lease_ip

leaseIpAddress

 

strleaseHardwareAddress

lease_mac

leaseHardwareAddress

 

str

message

message

 

str

rawSource

rawMessage

 

str

rawTagged

rawMessage

tag

Code Block
tag + ": " + rawMessage

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.bluecat.dhcpd
dhcp.bluecat.dhcpd
dhcp.bluecat.dhcpd

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.bluecat.dhcpd'

str

signature

signature

 

strsrcIp

source_ip

srcIp

 

ip4srcHost

source_hostname

-

Code Block
null('')

strdestMac

destination_mac

destMac

 

strsrcMac

source_mac

srcMac

 

str

description

-

Code Block
null('')

strleaseIpAddress

lease_ip

-

Code Block
null('')

strleaseHardwareAddress

lease_mac

-

Code Block
null('')

str

message

message

 

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.infoblox.stdout
dhcp.infoblox.stdout
dhcp.infoblox.stdout

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.infoblox.stdout'

str

signature

packet

 

strsrcIp

source_ip

-

Code Block
null(ip4('0.0.0.0'))

ip4srcHost

source_hostname

-

Code Block
null('')

strdestMac

destination_mac

-

Code Block
null('')

strsrcMac

source_mac

-

Code Block
null('')

str

description

-

Code Block
null('')

strleaseIpAddress

lease_ip

leaseIpAddress

 

strleaseHardwareAddress

lease_mac

leaseHardwareAddress

 

str

message

message

 

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Rw tab
titleTables 4-6

[ dhcp.microsoft.ip4 ] [ dhcp.microsoft.ip6 ] [ dhcp.unix.stdout ]

Anchor
dhcp.microsoft.ip4
dhcp.microsoft.ip4
dhcp.microsoft.ip4

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.infoblox.ip4'

str

signature

-

Code Block
null('')

strsrcIp

source_ip

srcIp

 

ip4srcHost

source_hostname

srcHost

 

strdestMac

destination_mac

-

Code Block
null('')

strsrcMac

source_mac

srcMac

 

str

description

description

 

strleaseIpAddress

lease_ip

-

Code Block
null('')

strleaseHardwareAddress

lease_mac

-

Code Block
null('')

str

message

-

Code Block
null('')

str

rawSource

-

Code Block
null('')

str

rawTagged

rawTagged

 

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.microsoft.ip6
dhcp.microsoft.ip6
dhcp.microsoft.ip6

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.infoblox.ip6'

str

signature

-

Code Block
null('')

strsrcIp

source_ip

srcIp6

Code Block
ip4(srcIp6)

ip4srcHost

source_hostname

-

Code Block
null('')

strdestMac

destination_mac

-

Code Block
null('')

strsrcMac

source_mac

-

Code Block
null('')

str

description

description

 

strleaseIpAddress

lease_ip

-

Code Block
null('')

strleaseHardwareAddress

lease_mac

-

Code Block
null('')

str

message

-

Code Block
null('')

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawSource

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.unix.stdout
dhcp.unix.stdout
dhcp.unix.stdout

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.unix.stdout'

str

signature

-

Code Block
null('')

strsrcIp

source_ip

-

Code Block
null(ip4('0.0.0.0'))

ip4srcHost

source_hostname

-

Code Block
null('')

strdestMac

destination_mac

-

Code Block
null('')

strsrcMac

source_mac

-

Code Block
null('')

str

description

-

Code Block
null('')

strleaseIpAddress

lease_ip

leaseIpAddress

 

strleaseHardwareAddress

lease_mac

leaseHardwareAddress

 

str

message

-

Code Block
null('')

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawSource

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

...