Page Comparison

Table of Contents

Live Search

The tags beginning with cef0.bit9CarbonblackJson identify events in CEF format generated by Barracuda.

...

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
act	`str`
dhost	`str`
dntdom	`str`
dpid	`int4`
dproc	`str`
dst	`ip4`
dpt	`int4`
dvchost	`str`
shost	`str`
type	`str`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`		✓