V 2.0 : Question History Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

V 2.0 : Question History Events

Base Rule

General Audit

Other Audit Success

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

N/A

N/A

Vendor or manufacturer name.

N/A

N/A

N/A

Product name.

N/A

N/A

N/A

Product version.

N/A

N/A

N/A

EventID.

QuestionId

<object>

Number

N/A

Username

<login>

Text/String

N/A

Expitation

N/A

N/A

N/A

Source

N/A

N/A

N/A

Question

<objectname>

Text/String

N/A