Power BI Messages
Vendor Documentation
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
Power BI Messages | Base Rule | General Application Information | Information |
Power BI : Create Dashboard | Sub Rule | General Application Information | Information |
Power BI : Create Dataset | Sub Rule | General Application Information | Information |
Power BI : Create Report | Sub Rule | General Application Information | Information |
Power BI : Edit Report | Sub Rule | General Application Information | Information |
Power BI : Export Report | Sub Rule | File Sent | Information |
Power BI : Opt in for ProTrial | Sub Rule | General Application Information | Information |
Power BI : Print Dashboard | Sub Rule | General Application Information | Information |
Power BI : View Dashboard | Sub Rule | General Application Information | Information |
Power BI : View Report | Sub Rule | General Application Information | Information |
Power BI : View Usage Metrics | Sub Rule | General Application Information | Information |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
---|---|---|---|
TS | N/A | N/A | N/A |
SESSID | <session> | Text/String | Session information |
COMMAND | <command> | Text/String | Command name |
USERTYPE | N/A | N/A | Type of user |
USERKEY | N/A | N/A | User key informations hexadecimal value |
WORKLOAD | <process> <vendorinfo> | Text/String | Audit log record type |
RESULTCODE | <result> | Text/String | Results |
OBJECT | <object> | Text/String | Object name |
USER | <login> <domain> | Text/String | Source user name |
SIP | <sip> | IP Address | Source IP address |
VERSION | N/A | N/A | N/A |
ORGANIZATIONID | N/A | N/A | N/A |
ACTIVITY | <action> | Text/String | N/A |
DASHBOARDID | N/A | N/A | N/A |
DASHBOARDNAME | <object> | Text/String | N/A |
DATACONNECTIVITYMODE | N/A | N/A | N/A |
DATASETS | N/A | N/A | N/A |
DATASETID | N/A | N/A | N/A |
DATASETNAME | N/A | N/A | N/A |
ITEMNAME | <objectname> | Text/String | N/A |
ISSUCCESS | <result> | Text/String | N/A |
REPORTID | N/A | N/A | N/A |
REPORTNAME | N/A | N/A | N/A |
WORKSPACEID | N/A | N/A | N/A |
WORKSPACENAME | <session> | Text/String | N/A |
USERAGENT | <useragent> | Text/String | N/A |