General Blocked Event
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
|---|---|---|---|
| General Blocked Event | Base Rule | Blocked Message | Failed Activity |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type |
|---|---|---|
| reason | <reason> | Text/String |
| url | <url> | Text/String |
| route | <status> | Text/String |
| sourceip | <dip> <dname> | IP Address/Text/String |
| Sender | <sender> | Text/String |
| recipient | <recipient> | Text/String |
| senderDomain | <domain> | Text/String |