Syslog Zscaler Nano - V 2.0 : DLP Log Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

V 2.0 : DLP Log Events

Base Rule

General DLP Message

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

ZS_ReceivedTime

N/A

N/A

N/A

ZS_SentTime

N/A

N/A

N/A

RuleName

<object>

Text/String

N/A

Sender

<sender>

Text/String

N/A

Recipient

<recipient>

Text/String

N/A

Subject

<subject>

Text/String

N/A

FileType

<objecttype>

Text/String

N/A

FileName

<objectname>

Text/String

N/A

DLPEngine

N/A

N/A

N/A

DLPDictionaries

N/A

N/A

N/A

RecordType

<sessiontype>

Text/String

N/A

Action

<action>

Text/String

N/A