Cyberhaven Event Time

When the underlying DLP event occurred. May precede the incident creation time if content inspection was delayed.

Details

ID	`incident_cyberhaveneventtime`
CLI Name	`cyberhaveneventtime`
Type	date
Version	-1
Required	No
Read Only	Yes
Use as KPI	No
Searchable	Yes

Associated Incident Types

Cyberhaven Incident

Source

incidentfield-Cyberhaven-Event-Time.json

Download History Raw

{
    "id": "incident_cyberhaveneventtime",
    "version": -1,
    "modified": "2026-06-17T00:00:00.000000000+05:30",
    "name": "Cyberhaven Event Time",
    "ownerOnly": false,
    "description": "When the underlying DLP event occurred. May precede the incident creation time if content inspection was delayed.",
    "cliName": "cyberhaveneventtime",
    "type": "date",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": true,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "openEnded": false,
    "associatedTypes": [
        "Cyberhaven Incident"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.10.0"
}