Document toolboxDocument toolbox

iam.imprivata

Introduction

The tags beginning with iam.imprivata identify events generated by Imprivata.

Valid tags and data tables 

The full tag must have at least three levels. The first two are fixed as iam.imprivata. The third level identifies the type of events sent.

These are the valid tags and corresponding data tables that will receive the parsers' data:

Product / Service

Tags

Data tables

Product / Service

Tags

Data tables

Imprivata

iam.imprivata.events

iam.imprivata.events

For more information, read more about Devo tags.

Table structure

These are the fields displayed in this table:

iam.imprivata.events

Field

Type

Extra field

Field transformation

Source field name

Field

Type

Extra field

Field transformation

Source field name

eventdate

timestamp

 

 

 

host

str

 

split(hostchain, "=", 0)

hostchain

sourceEventDate

str

 

 

 

product

str

 

 

 

priority

str

 

 

 

source

str

 

 

 

message

str

 

 

 

event

str

 

 

 

serverIp

ip4

 

ip4(ifthenelse(endswith(server_ip, "."), substring(server_ip, 0, length(server_ip), -1), server_ip))

server_ip

time

str

 

 

 

user

str

 

 

 

imprivata_domain

str

 

 

 

hostchain

str

✓

 

 

tag

str

✓

 

 

rawMessage

str

✓

 

rawSource