ADSelfService Plus
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
ADSelfService Plus | Base Rule | General Information | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
eventtime | N/A | N/A | N/A |
N/A | N/A | N/A | N/A |
level | <severity> | Text/String | N/A |
N/A | N/A | N/A | N/A |
N/A | <dname> | Text/String | N/A |
N/A | <vendorinfo> | Text/String | N/A |
STATUS | <status> | Text/String | N/A |
DOMAIN NAME | <domainorigin> | Text/String | N/A |
ACCESS_MODE | <useragent> | Text/String | N/A |
LOGIN NAME | <login> | Text/String | N/A |
IP | <sip> | Ip Address | N/A |
HOST | <sname> | Text/String | N/A |
TIME | <milliseconds> | Numbers | N/A |
DATE_TIME | N/A | N/A | N/A |
ACTION_NAME | <command> | Text/String | N/A |
DELIVERED_TIME | N/A | N/A | N/A |
NAME | <account> | Text/String | N/A |
NOTIFICATION_TYPE | N/A | N/A | N/A |