Process Information 2

Classification

Rule Name	Rule Type	Common Event	Classification
Process Information	Base Rule	General Process Information	Information

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text/String
N/A	<process>	Text/String
N/A	<processid>	Number
user	<login>	Text/String
action	<action>	Text/String
action	<command>	Text/String
status	<status>	Text/String

×