Syslog - Imperva Data Risk Analytics CEF
Device Details
Device Name | Data Risk Analytics |
Vendor | Imperva |
Device Type | Security |
Supported Model Name/Number | N/A |
Supported Software Version | N/A |
Collection Method | Syslog |
Configurable Log Output | CEF |
Log Source Type | Syslog - Imperva Data Risk Analytics CEF |
Log Processing Policy | LogRhythm Default V 2.0 |
Exceptions | N/A |
Additional Information | https://docs.imperva.com/bundle/v4.2-dra-user-guide/page/Service_Account_Abuse.htm https://docs-cybersec.thalesgroup.com/bundle/v4.3-dra-user-guide/page/69851.htm |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
Type | Product Version | Supported Schema Fields |
|---|---|---|
Catch All : Level 1 | N/A | <tag1>, <severity> |
Catch All : Level 2 | N/A | <version>, <vmid>, <objecttype>, <severity> |
Database Log Messages | N/A | <version>, <vmid>, <objecttype>, <tag1>, <login>, <sip>, <sname>, <dip>, <dname>, <subject>, <url>, <account>, <account>, <quantity>, <action>, <severity>, <sessiontype> |
Issue Log Messages | N/A | <version>, <objecttype>, <tag1>, <sip>, <login>, <sname>, <dip>, <dname>, <subject>, <action>, <url>, <severity>, <quantity> |
Revision History
KB Version | Log Type | Change Type | Details |
|---|---|---|---|
KB 7.1.724.0 | Syslog - Imperva Data Risk Analytics CEF | New Device Documentation | N/A |