Sendmail : Mail From
Classification
Rule Name | Rule Type | Classification | Common Event |
|---|---|---|---|
| Sendmail : Mail From | Base Rule | Information | Email Delivery Message From |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type |
|---|---|---|
| N/A | <processid> | Text/String |
| N/A | <object> | Text/String |
| from | <sender> | Text/String |
| proto | <protname> | Text/String |
| relay | <sname> | Text/String |
| N/A | <sip> | Number |
| size | <bytesin> | Number |