This group includes tags that start with the level mail
. These tags identify data generated by email servers.
Company | Product / service | Valid tags |
---|
| Agari Phishing Defense | mail.agari.phishing_defense.policy_events mail.agari.phishing_defense.messages
Check more info about these parsers |
| Cisco Email Security Appliance | |
| | |
| Microsoft Exchange Server
| mail.exchange.messagetracking mail.exchange.ncsa mail.exchange.w3c
|
| FortiMail: Secure Email Gateway | mail.fortinet.event.admin mail.fortinet.event.config mail.fortinet.event.ha mail.fortinet.event.smtp mail.fortinet.event.update mail.fortinet.spam mail.fortinet.statistics mail.fortinet.virus.infected
|
| Knowbe4KnowBe4 | mail.knowbe4.phisher.webhooks
Check more info about these parsers |
| Mimecast Secure Email Gateway Mimecast Targeted Threat Protection | mail.mimecast.archive mail.mimecast.archive.messageview mail.mimecast.archive.search mail.mimecast.audit.events mail.mimecast.siem mail.mimecast.siem.delivery mail.mimecast.siem.jrnl mail.mimecast.siem.process mail.mimecast.siem.receipt mail.mimecast.ttp mail.mimecast.ttp.attachment mail.mimecast.ttp.impersonation mail.mimecast.ttp.url mail.mimecast.message.list mail.mimecast.message.summary mail.mimecast.threat.feed mail.mimecast.account.dashboard
Check more info about these parsers |
| Postfix mail server
| mail.postfix.error mail.postfix.info
|
| Proofpoint Email Protection | mail.proofpoint.tapsiem_v2 mail.proofpoint.sendmail mail.proofpoint.stdout mail.proofpoint.trap mail.proofpoint.tapsiem_v2.clicksblocked mail.proofpoint.tapsiem_v2.clickspermitted mail.proofpoint.tapsiem_v2.messagesblocked mail.proofpoint.tapsiem_v2.messagesdelivered
Check more info about these parsers
|
| Trend Micro InterScan Messaging Security Suite (IMSS) | mail.smtp.as400alerts mail.smtp.dlp mail.smtp.general mail.smtp.imss-polevt mail.smtp.spam-eti mail.smtp.spam-spain mail.smtp.spam-tis mail.smtp.spam-trap
|
...