Device Details
|
Device Name |
Data Risk Analytics |
|
Vendor |
Imperva |
|
Device Type |
Security |
|
Supported Model Name/Number |
N/A |
|
Supported Software Version |
N/A |
|
Collection Method |
Syslog |
|
Configurable Log Output |
CEF |
|
Log Source Type |
Syslog - Imperva Data Risk Analytics CEF |
|
Log Processing Policy |
LogRhythm Default V 2.0 |
|
Exceptions |
N/A |
|
Additional Information |
https://docs.imperva.com/bundle/v4.2-dra-user-guide/page/Service_Account_Abuse.htm https://docs-cybersec.thalesgroup.com/bundle/v4.3-dra-user-guide/page/69851.htm |
Supported Log Messages
(List of LR tags used to parse the log information for each message type)
|
Type |
Product Version |
Supported Schema Fields |
|---|---|---|
|
Catch All : Level 1 |
N/A |
<tag1>, <severity> |
|
Catch All : Level 2 |
N/A |
<version>, <vmid>, <objecttype>, <severity> |
|
Database Log Messages |
N/A |
<version>, <vmid>, <objecttype>, <tag1>, <login>, <sip>, <sname>, <dip>, <dname>, <subject>, <url>, <account>, <account>, <quantity>, <action>, <severity>, <sessiontype> |
|
Issue Log Messages |
N/A |
<version>, <objecttype>, <tag1>, <sip>, <login>, <sname>, <dip>, <dname>, <subject>, <action>, <url>, <severity>, <quantity> |
Revision History
|
KB Version |
Log Type |
Change Type |
Details |
|---|---|---|---|
|
KB 7.1.724.0 |
Syslog - Imperva Data Risk Analytics CEF |
New Device Documentation |
N/A |