Content Comparison

...

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
cat	`str`
cs1Label	`str`
cs1	`str`
msg	`str`
rt	`str`
shost	`str`
smac	`str`
src	`ip4`
suid	`str`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`		✓

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
cat	`str`
msg	`str`
rt	`str`
shost	`str`
src	`ip4`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`		✓

Version	Old Version 2	New Version 3
Changes made by	Juan Tomás Alonso Nieto (Deactivated)	Juan Tomás Alonso Nieto (Deactivated)
Saved on	Sept 27, 2023	Sept 27, 2023

Versions Compared