Parsers and Generated Fields
Tag Fields Created by Parser fsx-xml
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser fsx-xml
| Source Field | LogScale Repository Field |
|---|---|
| Vendor.Event.EventData.IpAddress | client.ip |
| Vendor.Event.EventData.IpPort | client.port |
| Vendor.Event.System.EventID | event.id |
| Vendor.Event.EventData.ObjectName | file.path |
| Vendor.Event.EventData.ObjectType | file.type |
| Vendor.Event.System.Execution. | process.pid |
| Vendor.Event.System.Execution. | process.thread.id |
| Vendor.Event.EventData.SubjectUserSid | user.id |
| Vendor.Event.EventData.SubjectUserName | user.name |