Page Comparison

...

These are the fields displayed in this table:

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
cat	`str`
rt	`timestamp`
cs1Label	`str`
cs2Label	`str`
cs2	`str`
in	`int8`
out	`int8`
dvc	`ip4`
suser	`str`
cs1	`str`
msg	`str`
eventId	`str`
modelConfidence	`str`
eventAnnotationAuditTrail	`str`
customerID	`str`
agt	`str`
originalAgentHostName	`str`
Severity	`str`
aid	`str`
av	`str`
originalAgentVersion	`str`
eventAnnotationEndTime	`str`
eventAnnotationManagerReceiptTime	`str`
originalAgentId	`str`
originalAgentType	`str`
locality	`str`
eventAnnotationModificationTime	`str`
priority	`str`
customerURI	`str`
originalAgentAddress	`str`
at	`str`
originalAgentMacAddress	`str`
deviceZoneURI	`str`
dtz	`str`
eventAnnotationStageUpdateTime	`str`
eventAnnotationVersion	`str`
atz	`str`
deviceSeverity	`str`
deviceZoneID	`str`
assetCriticality	`str`
ahost	`str`
mrt	`str`
relevance	`str`
eventAnnotationFlags	`str`
art	`str`
originalAgentZoneURI	`str`
amac	`str`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`

Versions Compared