Absolute Modeling Rule

Modeling Rule

Absolute

Details

IDAbsolute_ModelingRule
From Version8.15.0

Schema

absolute_secure_endpoint_raw

Field Type Array?
actorDisplayId string
actorDisplayName string
actorObjectType string
eventType string
id string
objectDisplayId string
objectDisplayName string
objectObjectType string
objectProperties string
parsed_fields_NewValue string
parsed_fields_OldValue string
secondaryObjectDisplayId string
secondaryObjectDisplayName string
secondaryObjectType string
verb string
{
    "absolute_secure_endpoint_raw": {
        "parsed_fields_NewValue": {
            "type": "string",
            "is_array": false
        },
        "parsed_fields_OldValue": {
            "type": "string",
            "is_array": false
        },        
        "id": {
            "type": "string",
            "is_array": false
        },
        "verb": {
            "type": "string",
            "is_array": false
        },
        "eventType": {
            "type": "string",
            "is_array": false
        },
        "actorDisplayId": {
            "type": "string",
            "is_array": false
        },
        "actorObjectType": {
            "type": "string",
            "is_array": false
        },
        "objectDisplayId": {
            "type": "string",
            "is_array": false
        },
        "actorDisplayName": {
            "type": "string",
            "is_array": false
        },
        "objectObjectType": {
            "type": "string",
            "is_array": false
        },
        "objectDisplayName": {
            "type": "string",
            "is_array": false
        },
        "secondaryObjectType": {
            "type": "string",
            "is_array": false
        },
        "secondaryObjectDisplayName": {
            "type": "string",
            "is_array": false
        },
        "secondaryObjectDisplayId": {
            "type": "string",
            "is_array": false
        },
        "objectProperties": {
            "type": "string",
            "is_array": false
        }
    }
}