User Identification

User Identification

Base Rule

General User Activity Monitor Event

Information

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

N/A

N/A

N/A

<severity>

Text/String

N/A

N/A

N/A

N/A

<process>

Text/String

N/A

<processid>

Number

N/A

<login>

Text/String

N/A

<account>

Text/String

N/A

<object>

Text/String

N/A

<objectname>

Text/String