Parsers and Generated Fields
Tag Fields Created by Parser microsoft-windows-dhcp-server
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser microsoft-windows-dhcp-server
| Source Field | CPS Field | Description | Mapping |
|---|---|---|---|
| IPv4 DNS registration error code | Vendor.DnsRegError | Â | error.code |
| IPv6 error code | Vendor.Error_Code | Â | error.code |
| Host name | Vendor.Host_Name | Â | host.hostname |
| Event identifier | Vendor.ID | Â | event.id |
| Source IP address for IPv4 logs | Vendor.IP_Address | Â | source.ip |
| Source IP address for IPv6 logs | Vendor.IPv6_Address | Â | source.ip |
| MAC address formatted with dashes | Vendor.Mac_Address | Â | source.mac |
| Alternative username field when User_Name is not available | Vendor.UserClass_Ascii | Â | user.name |
| Username when available | Vendor.User_Name | Â | user.name |
Tag Fields Created by Parser windows-dhcp-server-csv
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type