Parsers and Generated Fields
Tag Fields Created by Parser onelogin-json
#Vendor
#event.outcome
Fields Identified by Parser onelogin-json
| Source Field | CPS Field | Description | Mapping |
|---|---|---|---|
| Vendor.app | agent.id | Â | Â |
| Vendor.app | agent.name | Â | Â |
| Vendor.user | destination.user.id | Â | Â |
| Vendor.user | destination.user.name | Â | Â |
| Vendor.otp | device.id | Â | Â |
| Vendor.error | error.message | Â | Â |
| Vendor.id | event.id | Â | Â |
| source.ip | related.ip[0] | Â | Â |
| source.user.id | related.user[0] | Â | Â |
| source.user.name | related.user[1] | Â | Â |
| Vendor.account | related.user[2] | Â | Â |
| destination.user.id | related.user[3] | Â | Â |
| destination.user.name | related.user[4] | Â | Â |
| Vendor.risk | risk.calculated.score | Â | Â |
| Vendor.policy | rule.id | Â | Â |
| Vendor.policy | rule.name | Â | Â |
| Vendor.ipaddr | source.ip | Â | Â |
| Vendor.group | source.user.group.id | Â | Â |
| Vendor.group | source.user.group.name | Â | Â |
| Vendor.actor | source.user.id | Â | Â |
| Vendor.actor | source.user.name | Â | Â |
| Vendor.role | source.user.roles[0] | Â | Â |