| Type | Product Version | Supported Schema Fields |
|---|
| V 2.0 : Action History Events | N/A | <action>, <status>, <login>, <command>, <account> |
| V 2.0 : Action Mgmt Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Authentication Success Events | N/A | <login>, <session>, <sessiontype>, <sip>, <vendorinfo>, <tag1> |
| V 2.0 : Content Set Role Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Content Set Role Privilege Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Group Events | N/A | <object>, <login>, <domainorigin>, <group>, <tag1>, <vendorinfo> |
| V 2.0 : Package Mgmt Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Plugin Mgmt Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Question History Events | N/A | <object>, <login>, <objectname> |
| V 2.0 : Question Mgmt Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Sensor Mgmt Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : User Group Mgmt Events | N/A | <object>, <login>, <group>, <tag1>, <vendorinfo> |
| V 2.0 : User Logon Failure | N/A | <reason>, <login>, <sip>, <vendorinfo> |
| V 2.0 : User Mgmt Events | N/A | <object>, <action>, <group>, <tag1>, <login>, <domainorigin>, <account>, <tag2>, <vendorinfo> |
| V 2.0 : Content Set Audit Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Package Audit Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Personas Audit Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 : Api Tokens Audit Events | N/A | <object>, <login>, <domainorigin>, <objectname>, <tag1>, <vendorinfo> |
| V 2.0 :Asset Report Physical Machine Summary Event | N/A | <vmid>, <object>, <quantity> |
| V 2.0 : Client Status Events | N/A | <vmid>, <sname>, <sip>, <dip>, <status>, <version> |
| V 2.0 : ADQuery Windows Events | N/A | <vmid>, <status>, <quantity> |
| V 2.0 : Tanium Discover Events | N/A | <vmid>, <smac>, <sip>, <snatip>, <sname>, <object> |
