Breadcrumbs

V 2.0 : Tanium Discover Events

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

V 2.0 : Tanium Discover Events

Base Rule

General Information

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

N/A

N/A

N/A

Vendor or Manufacturer Name

N/A

N/A

N/A

Product Name

N/A

N/A

N/A

Product Version

N/A

<vmid>

Text/String

EventID

id

N/A

N/A

N/A

MacAddress

N/A

N/A

N/A

MacOrganization

<smac>

Text/String

N/A

LocallyAdministeredMacAddress

N/A

N/A

N/A

IpAddress

<sip>

IP Address

N/A

NatIpAddress

<snatip>

IP Address

N/A

HostName

<sname>

Text/String

N/A

Labels

N/A

N/A

N/A

Locations

N/A

N/A

N/A

TaniumComputerId

N/A

N/A

N/A

Ports

N/A

N/A

N/A

Os

<object>

Text/String

N/A

OsGeneration

N/A

N/A

N/A

Managed

N/A

N/A

N/A

Unmanageable

N/A

N/A

N/A

Arp

N/A

N/A

N/A

Nmap

N/A

N/A

N/A

Ping

N/A

N/A

N/A

Connected

N/A

N/A

N/A

AwsApi

N/A

N/A

N/A

CentralizedNmap

N/A

N/A

N/A

SatelliteNmap

N/A

N/A

N/A

NDP

N/A

N/A

N/A

CreatedAt

N/A

N/A

N/A

UpdatedAt

N/A

N/A

N/A

FirstManagedAt

N/A

N/A

N/A

LastManagedAt

N/A

N/A

N/A

LastDiscoveredAt

N/A

N/A

N/A

Profile

N/A

N/A

N/A

InstanceId

N/A

N/A

N/A

ImageId

N/A

N/A

N/A

InstanceType

N/A

N/A

N/A

InstanceState

N/A

N/A

N/A

LaunchTime

N/A

N/A

N/A

Zone

N/A

N/A

N/A

Provider

N/A

N/A

N/A

VirtualNetworkId

N/A

N/A

N/A

OwnerId

N/A

N/A

N/A

SatelliteDecId

N/A

N/A

N/A

SatelliteName

N/A

N/A

N/A