[ Introduction ] [ Valid tags and data tables ] [ How is the data sent to Devo? ] [ Table structure ]
Introduction
The tags beginning with dspm.bigid
identify events generated by BigID.
...
For more information, read more about Devo tags.
How is the data sent to Devo?
To send logs to these tables, Devo provides a collector that retrieves the required events and sends them to your Devo domain. Check this article to learn more about the Big ID collector.
Table structure
These are the fields displayed in this table:
Field | Type | Field Transformation | Source field name | Extra Fields |
---|---|---|---|---|
eventdate |
|
|
| no |
machine |
|
|
| no |
id |
|
|
| no |
timestamp |
|
|
| no |
user |
|
|
| no |
source_ip |
|
|
| no |
source_ipv4 |
|
|
| no |
source_ipv6 |
|
|
| no |
action |
|
|
| no |
api |
|
|
| no |
resource_object |
|
|
| no |
user_agent |
|
|
| no |
additional_data |
|
|
| no |
at_devo_environment |
|
|
| no |
at_devo_pulling_id |
|
|
| no |
hostchain |
|
|
| yes |
tag |
|
|
| yes |
rawMessage |
|
|
| yes |