Page Comparison

...

How is the data sent to Devo?

...

These are the fields displayed in these tables:

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priority_code	`str`
cef_tag	`str`
cef_version	`str`
emb_device_vendor	`str`
emb_device_product	`str`
device_version	`str`
signature_id	`str`
name	`str`
severity	`str`
device_process_name	`str`
device_hostname	`str`
device_pid	`int4`
message	`str`
hostchain	`str`		✓
tag	`str`	cef_tag	✓
rawMessage	`str`		✓

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
deviceProcessName	`str`
dvchost	`str`
dvcpid	`int4`
msg	`str`
username	`str`
userip	`str`
usermac	`str`
authmethod	`str`
servername	`str`
serverip	`str`
apname	`str`
bssid	`str`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`		✓

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
cs2	`str`
dvc	`ip4`
in	`int8`
cs1	`str`
rt	`timestamp`
out	`int8`
dtz	`str`
deviceZoneID	`str`
eventAnnotationAuditTrail	`str`
eventAnnotationVersion	`str`
eventAnnotationModificationTime	`str`
art	`str`
originalAgentAddress	`str`
eventId	`str`
at	`str`
mrt	`str`
customerURI	`str`
originalAgentZoneURI	`str`
assetCriticality	`str`
eventAnnotationFlags	`str`
agt	`str`
modelConfidence	`str`
aid	`str`
amac	`str`
deviceZoneExternalID	`str`
Severity	`str`
relevance	`str`
av	`str`
eventAnnotationStageUpdateTime	`str`
locality	`str`
ahost	`str`
originalAgentVersion	`str`
customerID	`str`
atz	`str`
originalAgentMacAddress	`str`
originalAgentType	`str`
originalAgentId	`str`
eventAnnotationManagerReceiptTime	`str`
originalAgentHostName	`str`
priority	`str`
deviceZoneURI	`str`
eventAnnotationEndTime	`str`
hostchain	`str`		✓
tag	`str`	cefTag	✓
rawMessage	`str`		✓

Field	Type	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`
priority_code	`str`
cef_tag	`str`
cef_version	`str`
emb_device_vendor	`str`
emb_device_product	`str`
device_version	`str`
signature_id	`str`
name	`str`
severity	`str`
device_process_name	`str`
device_hostname	`str`
device_pid	`int4`
message	`str`
hostchain	`str`		✓
tag	`str`	cef_tag	✓
rawMessage	`str`		✓