Parsers and Generated Fields
Tag Fields Created by Parser onelogin-json
#Vendor
#event.outcome
Fields Identified by Parser onelogin-json
| Vendor Field | CPS Field | Description |
|---|---|---|
| Vendor.app | agent.id | |
| Vendor.app | agent.name | |
| Vendor.user | destination.user.id | |
| Vendor.user | destination.user.name | |
| Vendor.otp | device.id | |
| Vendor.error | error.message | |
| Vendor.id | event.id | |
| source.ip | related.ip[0] | |
| source.user.id | related.user[0] | |
| source.user.name | related.user[1] | |
| Vendor.account | related.user[2] | |
| destination.user.id | related.user[3] | |
| destination.user.name | related.user[4] | |
| Vendor.risk | risk.calculated.score | |
| Vendor.policy | rule.id | |
| Vendor.policy | rule.name | |
| Vendor.ipaddr | source.ip | |
| Vendor.group | source.user.group.id | |
| Vendor.group | source.user.group.name | |
| Vendor.actor | source.user.id | |
| Vendor.actor | source.user.name | |
| Vendor.role | source.user.roles[0] |