Page Comparison

...

Field	Data type	Description
hostname	`str`	Domain where the alert was triggered.
actiondate	`timestamp`	Date of the action performed.
Id	`str`	Unique ID automatically assigned to the alert when defined.
name	`str`	Name assigned to the alert when defined.
action	`str`	The action carried out (, which can be one of the following: EDIT STATUS , EDIT PRIORITY, DELETE…). EDIT PRIORITY DELETE CREATE COMMENT REPLY COMMENT UPDATE COMMENT DELETE COMMENT
username	`str`	User who performed the action.
info	`json`	Whenever a modification is made to a triggered alert, the information related to the change is collected and displayed here to indicate the new values assigned to status and priority, or to signify its deletion.See . Depending on the action (indicated in the action field), the displayed values vary: Edit status or priority: numeric values (see siem.logtrust.alert.info for the meaning of numerical values in fields such as priority or status their meaning). Deletion: empty. Comments: type of comment (ALERT-new comment vs REPLY), content of the message, ID assigned to the comment, and other IDs interrelating them with alerts and other comments.

Versions Compared