Sumo Logic Cloud SIEM Record Fields JSON

Sumo Logic Cloud SIEM Record Fields

Details

ID	`incident_sumologiccloudsiemrecordfieldsjson`
CLI Name	`sumologiccloudsiemrecordfieldsjson`
Type	markdown
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No

Associated Incident Types

Sumo Logic Signal

Source

incidentfield-Sumo_Logic_Cloud_SIEM_Record_Fields_JSON.json

Download History Raw

{
    "associatedToAll": false,
    "associatedTypes": [
        "Sumo Logic Signal"
    ],
    "caseInsensitive": true,
    "cliName": "sumologiccloudsiemrecordfieldsjson",
    "closeForm": false,
    "content": true,
    "columns": null,
    "defaultRows": null,
    "description": "Sumo Logic Cloud SIEM Record Fields",
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_sumologiccloudsiemrecordfieldsjson",
    "isReadOnly": false,
    "locked": false,
    "name": "Sumo Logic Cloud SIEM Record Fields JSON",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "required": false,
    "sla": 0,
    "system": false,
    "template": "|fields|\n|---|\n| ***action***: allow| \n|***action_source***: from-policy| \n|***application***: web-browsing| \n|***category***: computer-and-internet-info| \n|***rule_name***: Outbound Internet Access| \n|***source_ip***: 192.168.38.113| \n|***source_user***: deming.jadell| \n|***source_user_domain***: tyrellcorp.com| \n|***srcdevice_ip***: 192.168.38.113| \n|***user_username***: tyrellcorp.com\\deming.jadell| ",
    "threshold": 72,
    "type": "markdown",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.8.0"
}