New docs portal launching December 21st! All Exabeam, LogRhythm, and API documentation is moving to docs.exabeam.com. Existing links will redirect automatically, but we recommend updating your bookmarks.
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0

Items In

Items—not otherwise defined specifically—received from a device, system, or process.

Data Type

Double

Aliases

Use

Alias

Client Console Full Name

Not applicable

Client Console Short Name

Not applicable

Web Console Tab/Name

Not applicable

Elasticsearch Field Name

itemsPacketsIn

Rule Builder Column Name

ItemsIn

Regex Pattern

<itemsin>

NetMon Name

Not applicable

Field Relationships

  • Packets In

  • Packets Out

  • Bytes In/Bytes Out

Common Applications

Devices that send and receive nonspecific item types.

Use Case

  • Inventory control

  • Phone logs

MPE/Data Masking Manipulations

  • Polyfield

  • <items> tag can be used for a single item value.

  • In rule builder, parses in itemsin/itemsout.

Usage Standards

  • Use when bytes, bits, or packets in field is not appropriate

  • Use for the number of objects transferred in.

Examples

  • A10 Networks Load Balancer

09 08 2011 12:36:04 1.1.1.1 <LOC0:INFO> USABLDRRECFLOW01: [HA]<6> Sent 577, Received 559, Duplicate Id's 0, Wrong Group 0, Missed 0, Inaccurate Time 0

Total received Items.

  • SharePoint Audit

9/5/2008 5:03:44 PM event=100 account=safaware\pete.store userid=922 machinename= machineip= doclocation=ncsportal locationtype=0 eventname= eventsource=1 sourcename= eventdata=<Export><RequestedBy>safaware\pete.store</RequestedBy><Completed /><TotalItems>5</TotalItems><TotalSizeInBytes>120703</TotalSizeInBytes></Export>

Total Items could be parsed into <items>.