Vendor Documentation
Classification
|
Rule Name |
Rule Type |
Common Event |
Classification |
|---|---|---|---|
|
V 2.0 : DLP Log Events |
Base Rule |
General DLP Message |
Information |
Mapping with LogRhythm Schema
|
Device Key in Log Message |
LogRhythm Schema |
Data Type |
Schema Description |
|
ZS_ReceivedTime |
N/A |
N/A |
N/A |
|
ZS_SentTime |
N/A |
N/A |
N/A |
|
RuleName |
<object> |
Text/String |
N/A |
|
Sender |
<sender> |
Text/String |
N/A |
|
Recipient |
<recipient> |
Text/String |
N/A |
|
Subject |
<subject> |
Text/String |
N/A |
|
FileType |
<objecttype> |
Text/String |
N/A |
|
FileName |
<objectname> |
Text/String |
N/A |
|
DLPEngine |
N/A |
N/A |
N/A |
|
DLPDictionaries |
N/A |
N/A |
N/A |
|
RecordType |
<sessiontype> |
Text/String |
N/A |
|
Action |
<action> |
Text/String |
N/A |