Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Valid tags and data tables 

The full tag must have at least 3 levels. The first two are fixed asapp.workday. The third level identifies the type of events sent, and the fourth level indicates the event subtype. 

These are the valid tags and corresponding data tables that will receive the parsers' data:

Product / Service

Tags

Data tables

Workday

app.workday.activity

app.workday.activity

app.workday.audit

app.workday.audit

app.workday.user_activity.activity

app.workday.user_activity.activity

For more information, read more About Devo tags.

...

Anchor
tag1
tag1
app.workday.activity

...

Anchor
tag2
tag2
app.slack.audit

Field

Type

Extra Label fields

eventdate

timestamp

hostname

str

Task

str

Instances_Updated

str

Processed_Transaction

str

By_User

str

Business_Objects_that_Changed

str

hostchain

str

tag

str

rawMessage

str

Anchor
tag3
tag3
app.workday.user_activity.activity

Field

Type

Field transformation

Source field name

Extra fields

eventdate

timestamp

 

 

hostname

str

 

 

user_agent

str

 

 

activity_action

str

 

 

task_display_name

str

 

 

task_id

str

 

 

request_time

timestamp

 

 

ip_v4

ip4

Code Block
ip4(ip)

ip

ip_v6

ip6

Code Block
ip6(ip)

ip

session_id

str

 

 

device_type

str

 

 

system_account

str

 

 

at_devo_pulling_id

str

 

 

hostchain

str

 

 

tag

str

 

 

rawMessage

str