Dashboard Audit Log Messages

https://success.skyhighsecurity.com/Skyhigh_CASB/Skyhigh_Cloud_Connector/Cloud_Connector_Integrations/Cloud_Connector_SIEM_Integration/Cloud_Connector_SIEM_Integration_Formats

Dashboard Audit Log Messages

Base Rule

General Audit Messages

Information

N/A

N/A

N/A

Format

N/A

N/A

N/A

Device Vendor

N/A

N/A

N/A

Device Product

N/A

N/A

N/A

Device Version

N/A

<vmid>

Number

Device Event Class ID

N/A

<vendorinfo>

Text/String

Name

N/A

<severity>

Number

Severity

start

N/A

N/A

N/A

suser

<login>, <domainorigin>

Text/String

N/A

auditEventTypeEventCategoryId

<object>

Number

N/A

auditEventTypeEventCategoryName

<objecttype>

Text/String

N/A

auditEventTypeEventTypeId

N/A

N/A

N/A

auditEventTypeEventTypeName

N/A

N/A

N/A

auditEventTypeSubTypeId

N/A

N/A

N/A

eventInfo

<version>

Text/String

N/A

insertionId

N/A

N/A

N/A

objectName

<objectname>

Text/String

N/A

tenantId

<serialnumber>

Number

N/A

timestamp

N/A

N/A

N/A

userInfoFirstName

N/A

N/A

N/A

userInfoLastName

N/A

N/A

N/A

userInfoUserId

<session>

Number

N/A