Cisco Stealthwatch Modeling Rule

Modeling Rule

Cisco Secure Network Analytics (Stealthwatch)

Details

ID	`Cisco_Stealthwatch_ModelingRule`
From Version	8.15.0

Schema

`lancope_stealthwatch_raw`

Field	Type	Array?
`alarmID`	string	—
`alarmSev`	string	—
`domain`	string	—
`dst`	string	—
`dstPort`	string	—
`eventName`	string	—
`fullmessage`	string	—
`msg`	string	—
`proto`	int	—
`sourceUser`	string	—
`src`	string	—
`targetHostname`	string	—
`targetUser`	string	—

Source

CiscoStealthwatch_2_11.xif CiscoStealthwatch_2_11.yml CiscoStealthwatch_2_11_schema.json

Download History Raw

fromversion: 8.15.0
id: Cisco_Stealthwatch_ModelingRule
name: Cisco Stealthwatch Modeling Rule
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam