Amazon AWS CloudTrail Modeling Rule

Details

ID	`Amazon_AWS_CloudTrail_ModelingRule`
From Version	8.7.0

Schema

`amazon_aws_raw`

Field	Type	Array?
`_log_type`	string	—
`additionalEventData`	string	—
`awsRegion`	string	—
`errorCode`	string	—
`errorMessage`	string	—
`eventCategory`	string	—
`eventID`	string	—
`eventName`	string	—
`eventSource`	string	—
`eventTime`	datetime	—
`eventType`	string	—
`eventVersion`	string	—
`recipientAccountId`	string	—
`requestID`	string	—
`requestParameters`	string	—
`resources`	string	—
`responseElements`	string	—
`sharedEventID`	string	—
`sourceIPAddress`	string	—
`start`	string	—
`tlsDetails`	string	—
`userAgent`	string	—
`userIdentity`	string	—
`vpcEndpointAccountId`	string	—
`vpcEndpointId`	string	—

Source

AWSCloudTrail.xif AWSCloudTrail.yml AWSCloudTrail_schema.json

Download History Raw

fromversion: 8.7.0
id: Amazon_AWS_CloudTrail_ModelingRule
name: Amazon AWS CloudTrail Modeling Rule
rules: ''
schema: ''
tags:
supportedModules:
- xsiam