Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Introduction

The tags beginning with auth.thycotic identify events generated by Delinea (formerly Thycotic).

Valid tags and data tables 

The full tag must have 3 levels. The first two are fixed as auth.thycotic. The third level identifies the type of events sent.

These are the valid tags and corresponding data tables that will receive the parsers' data:

Product / Service

Tags

Data tables

Thycotic Secret Server

auth.thycotic.secretserver

auth.thycotic.secretserver

For more information, read more About Devo tags.

Table structure

These are the fields displayed in this table:

Field

Type

Extra fields

eventdate

timestamp

cefVersion

str

embDeviceVendor

str

embDeviceProduct

str

deviceVersion

str

signatureID

str

name

str

severity

str

_cefVer

str

duid

str

duser

str

fileId

str

fileType

str

fname

str

msg

str

rt

timestamp

src

ip4

suid

str

suser

str

suserDisplayName

str

folder

str

hostchain

str

tag

str

 

rawMessage

str

 

  • No labels