Parsers and Generated Fields
Tag Fields Created by Parser onelogin-json
#Vendor
#event.outcome
Fields Identified by Parser onelogin-json
Vendor Field | CPS Field | Description |
---|---|---|
Vendor.app | agent.id | |
Vendor.app | agent.name | |
Vendor.user | destination.user.id | |
Vendor.user | destination.user.name | |
Vendor.otp | device.id | |
Vendor.error | error.message | |
Vendor.id | event.id | |
source.ip | related.ip[0] | |
source.user.id | related.user[0] | |
source.user.name | related.user[1] | |
Vendor.account | related.user[2] | |
destination.user.id | related.user[3] | |
destination.user.name | related.user[4] | |
Vendor.risk | risk.calculated.score | |
Vendor.policy | rule.id | |
Vendor.policy | rule.name | |
Vendor.ipaddr | source.ip | |
Vendor.group | source.user.group.id | |
Vendor.group | source.user.group.name | |
Vendor.actor | source.user.id | |
Vendor.actor | source.user.name | |
Vendor.role | source.user.roles[0] |