Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

[ Introduction ] [ Valid tags and data tables  ] [ How is the data sent to Devo? ] [ Table structure ]

Introduction

The tags beginning with dspm.bigid identify events generated by BigID.

...

For more information, read more about Devo tags.

How is the data sent to Devo?

To send logs to these tables, Devo provides a collector that retrieves the required events and sends them to your Devo domain. Check this article to learn more about the Big ID collector.

Table structure

These are the fields displayed in this table:

Field

Type

Field Transformation

Source field name

Extra Fields

eventdate

timestamp

 

 

no

machine

str

 

 

no

id

str

 

 

no

timestamp

timestamp

 

 

no

user

str

 

 

no

source_ip

str

 

 

no

source_ipv4

ip4

 

 

no

source_ipv6

ip6

 

 

no

action

str

 

 

no

api

str

 

 

no

resource_object

str

 

 

no

user_agent

str

 

 

no

additional_data

str

 

 

no

at_devo_environment

str

 

 

no

at_devo_pulling_id

str

 

 

no

hostchain

str

 

 

yes

tag

str

 

 

yes

rawMessage

str

 

 

yes