Yammer Messages

Vendor Documentation

Classification

Rule Name

Rule Type

Common Event

Classification

Yammer Messages

Base Rule

General Application Information

Information

Mapping with LogRhythm Schema

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

TS

N/A

N/A

N/A

SESSID

<session>

Text/String

Session information

COMMAND

<command>

Text/String

Command name

USERTYPE

N/A

N/A

Type of user

USERKEY

N/A

N/A

User key information hexadecimal value

WORKLOAD

<process>

<vendorinfo>

Text/String

Audit log record type

RESULTCODE

<result>

Text/String

Result

OBJECT

<object>

Text/String

Object name

USER

<login>
<domain>

Text/String

Source user name

SIP

<sip>

IP Address

Source IP address

VERSION

<version>

Number

Version

ORGANIZATIONID

N/A

N/A

N/A

ACTORUSERID

<account>

Text/String

N/A

ACTORYAMMERUSERID

N/A

N/A

N/A

DATAEXPORTTYPE

N/A

N/A

N/A

FILEID

N/A

N/A

N/A

FILENAME

N/A

N/A

N/A

GROUPNAME

<group>

Text/String

N/A

ISSOFTDELETE

N/A

N/A

N/A

MESSAGEID

N/A

N/A

N/A

YAMMERNETWORKID

N/A

N/A

N/A

TARGETUSERID

N/A

N/A

N/A

TARGETYAMMERUSERID

N/A

N/A

N/A

VERSIONID

N/A

N/A

N/A