Syslog - Symantec Endpoint Threat Defense for AD

Device Details

Device Name	Endpoint Threat Defense for AD
Vendor	Symantec
Device Type	Endpoint Threat Defense for AD
Supported Model Name/Number	N/A
Supported Software Version	N/A
Collection Method	Syslog
Configurable Log Output	N/A
Log Source Type	Syslog - Symantec Endpoint Threat Defense for AD
Log Processing Policy	LogRhythm Default V 2.0
Exceptions	N/A
Additional Information	https://knowledge.broadcom.com/external/article/229874/threat-defense-for-ad-sends-limited-mess.html

(List of LR tags used to parse the log information for each message type)

Type	Product Version	Supported Schema Fields
Catch-All	N/A	<tag1>, <severity>
TDAD Log Messages	N/A	<severity>, <vendorinfo>, <domainorigin>, <sname>, <tag1>, <objecttype>, <dname>, <objectname>, <vmid>

KB Version	Log Type	Change Type	Details
KB 7.1.714.0	Syslog - Symantec Endpoint Threat Defense for AD	New Device Documentation	N/A