Vendor Documentation
Classification
|
Rule Name |
Rule Type |
Common Event |
Classification |
|---|---|---|---|
|
Power BI Messages |
Base Rule |
General Application Information |
Information |
|
Power BI : Create Dashboard |
Sub Rule |
General Application Information |
Information |
|
Power BI : Create Dataset |
Sub Rule |
General Application Information |
Information |
|
Power BI : Create Report |
Sub Rule |
General Application Information |
Information |
|
Power BI : Edit Report |
Sub Rule |
General Application Information |
Information |
|
Power BI : Export Report |
Sub Rule |
File Sent |
Information |
|
Power BI : Opt in for ProTrial |
Sub Rule |
General Application Information |
Information |
|
Power BI : Print Dashboard |
Sub Rule |
General Application Information |
Information |
|
Power BI : View Dashboard |
Sub Rule |
General Application Information |
Information |
|
Power BI : View Report |
Sub Rule |
General Application Information |
Information |
|
Power BI : View Usage Metrics |
Sub Rule |
General Application Information |
Information |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
Schema Description |
|---|---|---|---|
|
TS |
N/A |
N/A |
N/A |
|
SESSID |
<session> |
Text/String |
Session information |
|
COMMAND |
<command> |
Text/String |
Command name |
|
USERTYPE |
N/A |
N/A |
Type of user |
|
USERKEY |
N/A |
N/A |
User key informations hexadecimal value |
|
WORKLOAD |
<process> <vendorinfo> |
Text/String |
Audit log record type |
|
RESULTCODE |
<result> |
Text/String |
Results |
|
OBJECT |
<object> |
Text/String |
Object name |
|
USER |
<login>
|
Text/String |
Source user name |
|
SIP |
<sip> |
IP Address |
Source IP address |
|
VERSION |
N/A |
N/A |
N/A |
|
ORGANIZATIONID |
N/A |
N/A |
N/A |
|
ACTIVITY |
<action> |
Text/String |
N/A |
|
DASHBOARDID |
N/A |
N/A |
N/A |
|
DASHBOARDNAME |
<object> |
Text/String |
N/A |
|
DATACONNECTIVITYMODE |
N/A |
N/A |
N/A |
|
DATASETS |
N/A |
N/A |
N/A |
|
DATASETID |
N/A |
N/A |
N/A |
|
DATASETNAME |
N/A |
N/A |
N/A |
|
ITEMNAME |
<objectname> |
Text/String |
N/A |
|
ISSUCCESS |
<result> |
Text/String |
N/A |
|
REPORTID |
N/A |
N/A |
N/A |
|
REPORTNAME |
N/A |
N/A |
N/A |
|
WORKSPACEID |
N/A |
N/A |
N/A |
|
WORKSPACENAME |
<session> |
Text/String |
N/A |
|
USERAGENT |
<useragent> |
Text/String |
N/A |