User Option Choice

Classification

Rule Name

Rule Type

Common Event

Classification

User Option Choice

Base Rule

User Information

Information

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<session>

Number

N/A

<process>

Text/String

N/A

<object>

Text/String