Parsers and Generated Fields
Tag Fields Created by Parser mimecast-emailsecurity
#Cps.version
#Vendor
#ecs.version
#event.dataset
#event.kind
#event.module
#event.outcome
#observer.type
Fields Identified by Parser mimecast-emailsecurity
| Vendor Field | CPS Field | Description |
|---|---|---|
| Vendor.destinationIp | destination.address | |
| destination.address | destination.ip | |
| Vendor.fileExtension | email.attachments[0].file.extension | |
| Vendor.fileType | email.attachments[0].file.mime_type | |
| Vendor.fileName | email.attachments[0].file.name | |
| Vendor.aCode | email.local_id | |
| Vendor.subject | email.subject | |
| Vendor.rejectionCode | error.code | |
| Vendor.rejectionInfo | error.message | |
| Vendor.fileExtension | file.extension | |
| Vendor.fileType | file.mime_type | |
| Vendor.fileName | file.name | |
| source.address | source.ip | |
| Vendor.url | threat.indicator.url.original | |
| Vendor.tlsCipher | tls.cipher | |
| url.host | url.domain | |
| Vendor.url | url.original |