Exabeam Modeling Rule

Modeling Rule

Exabeam Advanced Analytics

Details

IDExabeam_ModelingRule
From Version8.4.0

Schema

exabeam_threat_center_raw

Field Type Array?
alertId string
destHost string
destIp string
mitres string
name string
priority string
rules string
srcHost string
srcIp string
useCases string
user string
{
  "exabeam_threat_center_raw": {
    "alertId": {
      "type": "string",
      "is_array": false
    },
    "name": {
      "type": "string",
      "is_array": false
    },
    "priority": {
      "type": "string",
      "is_array": false
    },
    "useCases": {
      "type": "string",
      "is_array": false
    },
    "rules": {
      "type": "string",
      "is_array": false
    },
    "mitres": {
      "type": "string",
      "is_array": false
    },
    "srcIp": {
      "type": "string",
      "is_array": false
    },
    "srcHost": {
      "type": "string",
      "is_array": false
    },
    "user": {
      "type": "string",
      "is_array": false
    },
    "destIp": {
      "type": "string",
      "is_array": false
    },
    "destHost": {
      "type": "string",
      "is_array": false
    }
  }
}