Parsers and Generated Fields
Tag Fields Created by Parser onelogin-json
#Vendor
#event.outcome
Fields Identified by Parser onelogin-json
| Source Field | CPS Field | Description | Mapping |
|---|---|---|---|
| Vendor.app | agent.id | ||
| Vendor.app | agent.name | ||
| Vendor.user | destination.user.id | ||
| Vendor.user | destination.user.name | ||
| Vendor.otp | device.id | ||
| Vendor.error | error.message | ||
| Vendor.id | event.id | ||
| source.ip | related.ip[0] | ||
| source.user.id | related.user[0] | ||
| source.user.name | related.user[1] | ||
| Vendor.account | related.user[2] | ||
| destination.user.id | related.user[3] | ||
| destination.user.name | related.user[4] | ||
| Vendor.risk | risk.calculated.score | ||
| Vendor.policy | rule.id | ||
| Vendor.policy | rule.name | ||
| Vendor.ipaddr | source.ip | ||
| Vendor.group | source.user.group.id | ||
| Vendor.group | source.user.group.name | ||
| Vendor.actor | source.user.id | ||
| Vendor.actor | source.user.name | ||
| Vendor.role | source.user.roles[0] |