Versions Compared

Old Version 5

changes.mady.by.user Juan Tomás Alonso Nieto

Saved on

compared with

New Version 6

changes.mady.by.user Juan Tomás Alonso Nieto

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Rw ui tabs macro
Rw tab
titleTables 1-3

[ ddi.infoblox.dhcp.dhcpd ] [ dhcp.bluecat.dhcpd ] [ dhcp.infoblox.stdout ]

Anchor
ddi.infoblox.dhcp.dhcpd
ddi.infoblox.dhcp.dhcpd
ddi.infoblox.dhcp.dhcpd

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'ddi.infoblox.dhcp.dhcpd'

str

signature

message_type

 

str

source_ip

-

Code Block
null(ip4('0.0.0.0'))

ip4

source_hostname

-

Code Block
null('')

str

destination_mac

-

Code Block
null('')

str

source_mac

-

Code Block
null('')

str

description

-

Code Block
null('')

str

lease_ip

leaseIpAddress

 

str

lease_mac

leaseHardwareAddress

 

str

message

message

 

str

rawSource

rawMessage

 

str

rawTagged

rawMessage

tag

Code Block
tag + ": " + rawMessage

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.bluecat.dhcpd
dhcp.bluecat.dhcpd
dhcp.bluecat.dhcpd

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.bluecat.dhcpd'

str

signature

signature

 

str

source_ip

srcIp

 

ip4

source_hostname

-

Code Block
null('')

str

destination_mac

destMac

 

str

source_mac

srcMac

 

str

description

-

Code Block
null('')

str

lease_ip

-

Code Block
null('')

str

lease_mac

-

Code Block
null('')

str

message

message

 

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.infoblox.stdout
dhcp.infoblox.stdout
dhcp.infoblox.stdout

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.infoblox.stdout'

str

signature

packet

 

str

source_ip

-

Code Block
null(ip4('0.0.0.0'))

ip4

source_hostname

-

Code Block
null('')

str

destination_mac

-

Code Block
null('')

str

source_mac

-

Code Block
null('')

str

description

-

Code Block
null('')

str

lease_ip

leaseIpAddress

 

str

lease_mac

leaseHardwareAddress

 

str

message

message

 

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Rw tab
titleTables 4-7

[ dhcp.microsoft.ip4 ] [ dhcp.microsoft.ip6 ] [ dhcp.unix.stdout ]

Anchor
dhcp.microsoft.ip4
dhcp.microsoft.ip4
dhcp.microsoft.ip4

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.infoblox.ip4'

str

signature

-

Code Block
null('')

str

source_ip

srcIp

 

ip4

source_hostname

srcHost

 

str

destination_mac

-

Code Block
null('')

str

source_mac

srcMac

 

str

description

description

 

str

lease_ip

-

Code Block
null('')

str

lease_mac

-

Code Block
null('')

str

message

-

Code Block
null('')

str

rawSource

-

Code Block
null('')

str

rawTagged

rawTagged

 

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.microsoft.ip6
dhcp.microsoft.ip6
dhcp.microsoft.ip6

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.infoblox.ip6'

str

signature

-

Code Block
null('')

str

source_ip

srcIp6

Code Block
ip4(srcIp6)

ip4

source_hostname

-

Code Block
null('')

str

destination_mac

-

Code Block
null('')

str

source_mac

-

Code Block
null('')

str

description

description

 

str

lease_ip

-

Code Block
null('')

str

lease_mac

-

Code Block
null('')

str

message

-

Code Block
null('')

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawSource

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
dhcp.unix.stdout
dhcp.unix.stdout
dhcp.unix.stdout

null('')

dhcpMessageType

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'dhcp.unix.stdout'

str

signature

-

Code Block

str

source_ip

-

Code Block
null(ip4('0.0.0.0'))

ip4

source_hostname

-

Code Block
null('')

str

destination_mac

-

Code Block
null('')

str

source_mac

-

Code Block
null('')

str

description

-

Code Block
null('')

str

lease_ip

leaseIpAddress

 

str

lease_mac

leaseHardwareAddress

 

str

message

-

Code Block
null('')

str

rawSource

rawSource

 

str

rawTagged

rawTagged

 

str

rawMessage

rawSource

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓

Anchor
firewall.paloalto.system
firewall.paloalto.system
firewall.paloalto.system

Field in union table

Field in source table

Field transformation

Data type

Extra fields

eventdate

eventdate

 

timestamp

source

-

Code Block
'firewall.paloalto.system'

str

signature

-serial

Code Block
null('') 

str

srcIp

client_ip

Code Block
ifthenelse(isnotnull(client_ip), client_ip, null(ip4('0.0.0.0')))

ip4

srcHost

src_host

 

str

destMac

-

Code Block
null('')

str

srcMac

-

Code Block
null('')

str

description

description

 

str

leaseIpAddress

lease_ip_address

 

str

leaseHardwareAddress

lease_hardware_address

 

str

message

-

Code Block
null('')

str

rawSource

rawMessage

 

str

rawTagged

rawMessage

-tag

Code Block
null('')tag + ": " + rawMessage

str

rawMessage

rawMessage

 

str

hostchain

hostchain

 

str

✓

tag

tag

 

str

✓