...
Field | Type | Source field name | Extra fields | ||
---|---|---|---|---|---|
eventdate |
|
| |||
hostnamerawMessage |
| hostchain | ✓ | ||
priority_codehostchain |
|
| ✓ | ||
cef_tagpriorityCode |
|
| |||
cef_versioncefTag |
|
| |||
emb_device_vendorcefVersion |
|
| |||
emb_device_productembDeviceVendor |
|
| |||
device_versionembDeviceProduct |
|
| |||
signature_iddeviceVersion |
|
| |||
namesignatureID |
|
| |||
severityname |
|
| |||
external_idseverity |
|
| |||
computer_idcefVer |
|
| |||
computer_nameact |
|
| |||
event_received_by_serverapp |
|
| |||
file_idcn1Label |
|
| |||
file_namecn1 |
|
| |||
file_pathcn2Label |
|
| |||
policy_namecn2 |
|
| |||
usernamecnt |
|
| |||
hostchaincs2Label |
|
| |||
✓cs2 | tag |
| | ✓ | |
rawMessage |
| ✓cs3Label |
| ||
cs3 |
| ||||
cs4Label |
| ||||
cs4 |
| ||||
cs5Label |
| ||||
cs5 |
| ||||
cs6Label |
| ||||
cs6 |
| ||||
deviceInboundInterface |
| ||||
deviceOutboundInterface |
| ||||
dst |
| ||||
dvchost |
| ||||
dvc |
| ||||
externalId |
| ||||
proto |
| ||||
rt |
| ||||
spt |
| ||||
src |
| ||||
agt |
| ||||
ahost |
| ||||
aid |
| ||||
arcSightEventPath |
| ||||
art |
| ||||
assetCriticality |
| ||||
at |
| ||||
atz |
| ||||
av |
| ||||
catdt |
| ||||
categoryBehavior |
| ||||
categoryDeviceGroup |
| ||||
categoryObject |
| ||||
categoryOutcome |
| ||||
categorySignificance |
| ||||
categoryTechnique |
| ||||
customerID |
| ||||
customerURI |
| ||||
destinationAssetId |
| ||||
destinationGeoCountryCode |
| ||||
destinationGeoLocationInfo |
| ||||
destinationGeoPostalCode |
| ||||
destinationGeoRegionCode |
| ||||
destinationZoneExternalID |
| ||||
destinationZoneID |
| ||||
destinationZoneURI |
| ||||
deviceSeverity |
| ||||
deviceZoneID |
| ||||
deviceZoneURI |
| ||||
dlat |
| ||||
dlong |
| ||||
dpt |
| ||||
dtz |
| ||||
eventAnnotationAuditTrail |
| ||||
eventAnnotationEndTime |
| ||||
eventAnnotationEventId |
| ||||
eventAnnotationFlags |
| ||||
eventAnnotationManagerReceiptTime |
| ||||
eventAnnotationModificationTime |
| ||||
eventAnnotationStageID |
| ||||
eventAnnotationStageUpdateTime |
| ||||
eventAnnotationStageURI |
| ||||
eventAnnotationVersion |
| ||||
eventId |
| ||||
locality |
| ||||
modelConfidence |
| ||||
mrt |
| ||||
priority |
| ||||
relevance |
| ||||
slat |
| ||||
slong |
| ||||
sourceAssetId |
| ||||
sourceGeoCountryCode |
| ||||
sourceGeoLocationInfo |
| ||||
sourceGeoPostalCode |
| ||||
sourceGeoRegionCode |
| ||||
sourceZoneExternalID |
| ||||
sourceZoneID |
| ||||
sourceZoneURI |
| ||||
type |
| ||||
tag |
|
| ✓ |