Breadcrumbs

Netskope : DLP Detection

Vendor Documentation

Classification

Rule Name

Rule Type

Classification

Common Event

Netskope : DLP Detection

Base Rule

Activity

Data Loss Prevention Activity

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Device Vendor

N/A

N/A

Device Product

N/A 

N/A

Device Version

N/A

N/A

Device Event Class ID

<vmid>

Text/String

Name of the event

N/A

N/A

Severity of the event

<severity>

Text/String

 accessMethod

N/A

N/A

device action

N/A

N/A

appcategory

<subject>

Text/String

browser

N/A

N/A

cci

N/A

N/A

ccl

N/A

N/A

device

N/A

N/A

dlpFile

N/A

N/A

dlpIncidentId

N/A

N/A

dlpProfile

N/A

N/A

dlpRule

N/A

N/A

dlpRuleCount

N/A

N/A

dst

<dip>

IP Address

fsize

<size>

Number

instanceId

N/A

N/A

md5

<hash>

Text/String

mimeType

<object>

Text/String

object

N/A

N/A

os

N/A

N/A

policy

<policy>

Text/String

requestClientApplication

N/A

N/A

sha256

<hash>

Text/String

sourceServiceName

 <process>

Text/String

src

<sip>

IP Address

suser

<login>

Text/String

timestamp

N/A

N/A

url

<url>

Text/String