Page Comparison

Versions Compared

Key

This line was added.
This line was removed.
Formatting was changed.

...

cef1.carbonBlack.protection

Field	Type	Extra fields
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
cat	`str`
cfp1Label	`str`
cfp1	`float8`
cfp2Label	`str`
cfp2	`float8`
cs1Label	`str`
cs1	`str`
cs2Label	`str`
cs2	`str`
cs3Label	`str`
cs3	`str`
cs5Label	`str`
cs5	`str`
deviceProcessName	`str`
dhost	`str`
dst	`ip4`
duser	`str`
dvchost	`str`
dvc	`ip4`
externalId	`int8`
fileHash	`str`
fileId	`str`
filePath	`str`
fname	`str`
msg	`str`
rt	`timestamp`
sproc	`str`
start	`timestamp`
ad_prevalence	`str`
agentZoneURI	`str`
agt	`str`
ahost	`str`
aid	`str`
amac	`str`
art	`str`
at	`str`
atz	`str`
av	`str`
destinationZoneURI	`str`
deviceSeverity	`str`
deviceZoneURI	`str`
dtz	`str`
eventId	`str`
flexString1	`str`
flexString1Label	`str`
flexString2	`str`
flexString2Label	`str`
hostchain	`str`	✓
rawMessage	`str`	✓