Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

[ Introduction ] [ Tag structure ] [ How is the data sent to Devo? ] [ Table structure ]

Introduction

The tags beginning with cef0.hpInc identify events in CEF format generated by HP Sure Click.

Tag structure

Events in CEF format don't have a specific tag structure, as explained in Technologies supported in CEF syslog format. They are always sent to a table with the structure cef0.deviceVendor.deviceProduct.

In this case, the valid data tables are:

Tags

Data tables

cef0.hpInc.sureClick

cef0.hpInc.sureClick

How is the data sent to Devo?

Learn more about CEF syslog format and how Devo tags these events in Technologies supported in CEF syslog format.

Table structure

These are the fields displayed in this table:

cef0.hpInc.sureClick

Field

Type

Extra field

Source field name

eventdate

timestamp

 

hostname

str

 

priorityCode

str

 

cefTag

str

 

cefVersion

str

 

embDeviceVendor

str

 

embDeviceProduct

str

 

deviceVersion

str

 

signatureID

str

 

name

str

 

severity

str

 

_cefVer

str

 

rt

str

 

request

str

 

sproc

str

 

src

ip4

 

fname

str

 

msg

str

 

fileHash

str

 

reason

str

 

suser

str

 

shost

str

 

hostchain

str

 

tag

str

cefTag

rawMessage

str

 

  • No labels