DNSAuditReports Log Messages

https://demo.adauditplus.com/help/index.html

DNSAuditReports Log Messages

Base Rule

General Audit Messages

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

<severity>

Text/String

N/A

Category

<object>

Text/String

N/A

REPORT_PROFILE

<objectname>

Text/String

N/A

EVENT_NUMBER

N/A

N/A

N/A

TIME_GENERATED

N/A

N/A

N/A

EVENT_TYPE

N/A

N/A

N/A

EVENT_TYPE_TEXT

<status>

Text/String

N/A

SOURCE

<login>

Text/String

N/A

REMARKS

<reason>

Text/String

N/A

OBJECT_SERVER

N/A

N/A

N/A

OPERATION_TYPE

N/A

N/A

N/A

OBJECT_TYPE

N/A

N/A

N/A

OBJECT_TYPE_TEXT

N/A

N/A

N/A

OBJECT_NAME

N/A

N/A

N/A

OBJECT_NAME_TEXT

N/A

N/A

N/A

OBJECT_LOCATION_TEXT

N/A

N/A

N/A

HANDLE_ID

N/A

N/A

N/A

PRIMARY_USER_NAME

N/A

N/A

N/A

PRIMARY_DOMAIN

N/A

N/A

N/A

PRIMARY_LOGIN_ID

N/A

N/A

N/A

CLIENT_USER_NAME

<dname>

Text/String

N/A

CLIENT_DOMAIN

<domainimpacted>

Text/String

N/A

CLIENT_LOGIN_ID

N/A

N/A

N/A

ACCESSES

N/A

N/A

N/A

OBJECT_CLASS

N/A

N/A

N/A

OBJECT_CLASS_TEXT

N/A

N/A

N/A

ATTRIBUTES

N/A

N/A

N/A

ATTRIBUTES_TEXT

N/A

N/A

N/A

ADDITIONAL_INFO

N/A

N/A

N/A

ADDITIONAL_INFO2

N/A

N/A

N/A

ADDITIONAL_INFO2_TEXT

N/A

N/A

N/A

ACCESS_MASK

N/A

N/A

N/A

FORMAT_MESSAGE

<subject>

Text/String

N/A

RECORD_NUMBER

N/A

N/A

N/A

CALLER_USER_SID

N/A

N/A

N/A

ATTRIBUTES_VALUE

N/A

N/A

N/A

CORRELATION_ID

N/A

N/A

N/A

ATTRIBUTES_NEW_VALUE

N/A

N/A

N/A

ATTRIBUTES_OLD_VALUE

N/A

N/A

N/A

ATTRIBUTE_CATEGORY_ID

N/A

N/A

N/A

ACCOUNT_NAME

N/A

N/A

N/A

ACCOUNT_DOMAIN

N/A

N/A

N/A

ACCOUNT_SID

N/A

N/A

N/A

CALLER_USER_NAME

N/A

N/A

N/A

CALLER_USER_DOMAIN

N/A

N/A

N/A

CALLER_LOGON_ID

N/A

N/A

N/A

DNS_MGMT_TYPE

N/A

N/A

N/A

HOST_TYPE

N/A

N/A

N/A

HOST_TYPE_STRING

N/A

N/A

N/A

CLIENT_USER_SAM_ACCOUNT_NAME

N/A

N/A

N/A

CLIENT_USER_DISPLAY_NAME

N/A

N/A

N/A

CLIENT_USER_PRINCIPAL_NAME

N/A

N/A

N/A

CLIENT_USER_GUID

N/A

N/A

N/A

CLIENT_USER_DISTINGUISH_NAME

N/A

N/A

N/A

CLIENT_USER_OU_GUID

N/A

N/A

N/A

CLIENT_USER_DEPARTMENT

N/A

N/A

N/A

CLIENT_USER_MANAGER_NAME

N/A

N/A

N/A

ATTRIBUTE_SYNTAX

N/A

N/A

N/A

OP_APPLN_CORRELATION_ID

N/A

N/A

N/A

OP_CORRELATION_ID

N/A

N/A

N/A

OP_TREE_DELETE

N/A

N/A

N/A

SOURCE_NAME

<sname>

Text/String

N/A

LOG_FILE_NAME

N/A

N/A

N/A

KEYWORDS_NAME

N/A

N/A

N/A

TASK_CATEGORY_NAME

N/A

N/A

N/A

TASK_CATEGORY_ID

N/A

N/A

N/A

EXTRA_COLUMN1

N/A

N/A

N/A

EXTRA_COLUMN2

N/A

N/A

N/A

EXTRA_COLUMN3

N/A

N/A

N/A

EXTRA_COLUMN4

N/A

N/A

N/A

EXTRA_COLUMN5

N/A

N/A

N/A

EXTRA_COLUMN6

N/A

N/A

N/A

EXTRA_COLUMN7

N/A

N/A

N/A

EXTRA_COLUMN8

N/A

N/A

N/A

EXTRA_COLUMN9

N/A

N/A

N/A

EXTRA_COLUMN10

N/A

N/A

N/A

CONFIGURED_DOMAIN_NAME

N/A

N/A

N/A

NEW_HANDLE_ID

N/A

N/A

N/A

ACTUAL_ATTR_NEW_VALUE

N/A

N/A

N/A

ACTUAL_ATTR_OLD_VALUE

N/A

N/A

N/A