Parsers and Generated Fields
Tag Fields Created by Parser google-chrome-enterprise
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser google-chrome-enterprise
| Vendor Field | CPS Field | Description |
|---|---|---|
| `event.outcome` | Conditional | Vendor.event |
| `device.id` | Copied | Vendor.device_id |
| `device.model.name` | Copied | Vendor.device_name |
| `event.action` | Copied | Vendor.event |
| `event.reason` | Copied | Vendor.reason |
| `event.reference` | Copied | Vendor.event_detail |
| `host.os.type` | Copied | Vendor.os_platform |
| `host.os.version` | Copied | Vendor.os_version |
| `url.original` | Copied | Vendor.url |
| `user.name` | Copied | Vendor.device_user |
| `user_agent.original` | Copied | Vendor.user_agent |
| `@timestamp` | Extracted | Vendor.time |
| `url.domain` | Parsed | Vendor.url (indirect) |
| `ecs.version` | Static | None |
| `event.category[]` | Static | None |
| `event.kind` | Static | None |
| `event.module` | Static | None |
| `event.type[]` | Static | None |
| Vendor.device_id | device.id | |
| Vendor.device_name | device.model.name | |
| Vendor.event | event.action | |
| Vendor.reason | event.reason | |
| Vendor.event_detail | event.reference | |
| Vendor.os_platform | host.os.type | |
| Vendor.os_version | host.os.version | |
| url.host | url.domain | |
| Vendor.url | url.original | |
| Vendor.device_user | user.name | |
| Vendor.user_agent | user_agent.original |