Audit Log Event fdrfeed.create
Falcon Data Replicator feed configurations have been created
This audit log type records operations for the following features:
| Field Type | Availability | Type | Description |
|---|---|---|---|
| actor | ActorType | Actor, as defined in humio-audit Actor Structure | |
| clientId | String | Client ID | |
| description | Option[String] | Description of the entity of object | |
| enabled | Boolean | Whether the entity has been enabled or not | |
| fdrFeedId | String | FDR Feed ID | |
| fdrFeedName | String | FDR feed name | |
| parserId | String | Parser ID | |
| repoId | String | ID of the repository | |
| repoName | String | Name of the repository | |
| s3Identifier | String | S3 identifier | |
| sensitive | Boolean | Whether the audited event is marked sensitive | |
| sqsUrl | String | URL of feed | |
| timestamp | ZonedDateTime | Timestamp of the audited event |