Power BI Messages

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

Power BI Messages

Base Rule

General Application Information

Information

Power BI : Create Dashboard

Sub Rule

General Application Information

Information

Power BI : Create Dataset

Sub Rule

General Application Information

Information

Power BI : Create Report

Sub Rule

General Application Information

Information

Power BI : Edit Report

Sub Rule

General Application Information

Information

Power BI : Export Report

Sub Rule

File Sent

Information

Power BI : Opt in for ProTrial

Sub Rule

General Application Information

Information

Power BI : Print Dashboard

Sub Rule

General Application Information

Information

Power BI : View Dashboard

Sub Rule

General Application Information

Information

Power BI : View Report

Sub Rule

General Application Information

Information

Power BI : View Usage Metrics

Sub Rule

General Application Information

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

TS

N/A 

N/A 

N/A 

SESSID

<session>

Text/String

Session information

COMMAND

<command>

Text/String

Command name

USERTYPE

N/A 

N/A 

Type of user

USERKEY

N/A 

N/A 

User key informations hexadecimal value

WORKLOAD

<process>

<vendorinfo>

Text/String

Audit log record type

RESULTCODE

<result>

Text/String

Results

OBJECT

<object>

Text/String

Object name

USER

<login>
<domain>

Text/String

Source user name

SIP

<sip>

IP Address

Source IP address

VERSION

N/A 

N/A 

N/A 

ORGANIZATIONID

N/A 

N/A 

N/A 

ACTIVITY

<action>

Text/String

N/A 

DASHBOARDID

N/A 

N/A 

N/A 

DASHBOARDNAME

<object>

Text/String

N/A 

DATACONNECTIVITYMODE

N/A 

N/A 

N/A 

DATASETS

N/A 

N/A 

N/A 

DATASETID

N/A 

N/A 

N/A 

DATASETNAME

N/A 

N/A 

N/A 

ITEMNAME

<objectname>

Text/String

N/A 

ISSUCCESS

<result>

Text/String

N/A 

REPORTID

N/A 

N/A 

N/A 

REPORTNAME

N/A 

N/A 

N/A 

WORKSPACEID

N/A 

N/A 

N/A 

WORKSPACENAME

 <session>

Text/String

N/A 

USERAGENT

<useragent>

Text/String

N/A