Parsers and Generated Fields

Tag Fields Created by Parser onelogin-json

  • #Vendor

  • #event.outcome

Fields Identified by Parser onelogin-json
Source FieldCPS Field
Vendor.appagent.id
Vendor.appagent.name
Vendor.userdestination.user.id
Vendor.userdestination.user.name
Vendor.otpdevice.id
Vendor.errorerror.message
Vendor.idevent.id
source.iprelated.ip[0]
source.user.idrelated.user[0]
source.user.namerelated.user[1]
Vendor.accountrelated.user[2]
destination.user.idrelated.user[3]
destination.user.namerelated.user[4]
Vendor.riskrisk.calculated.score
Vendor.policyrule.id
Vendor.policyrule.name
Vendor.ipaddrsource.ip
Vendor.groupsource.user.group.id
Vendor.groupsource.user.group.name
Vendor.actorsource.user.id
Vendor.actorsource.user.name
Vendor.rolesource.user.roles[0]