Domain (Origin) [7.4]
The Windows or DNS domain name from which the activity reported in the log originates.
This field is not available in LogRhythm versions earlier than 7.4.0.
Data Type
String
Aliases
Use | Alias |
---|---|
Client Console Full Name | Domain (Origin) |
Client Console Short Name | Not applicable |
Web Console Tab/Name | Domain (Origin) |
Elasticsearch Field Name | domain |
Rule Builder Column Name | Domain |
Regex Pattern | <domainorigin> |
NetMon Name | Not applicable |
Field Relationships
- SIP
- SIPv4
- SIPv6
- SIPv6E
- Origin Hostname
- Origin Hostname or IP
- Origin NAT IP
- DIP
- DIPv4
- DIPv6
- DIPv6E
- Impacted Hostname
- Impacted Hostname or IP
- Impacted NAT IP
- Origin Port
- Origin NAT Port
- Impacted Port
- Impacted NAT Port
- Origin MAC Address
- Impacted MAC Address
- Origin Interface
- Impacted Interface
- Origin Domain
- Origin Login
- Impacted Account
- IANA Protocol Number
- IANA Protocol Name
Common Applications
- WebProxy
- Network monitoring
- Active Directory
- SSO
Use Case
Correlating user activity across domains.
MPE/Data Masking Manipulations
Not applicable.