Details
| ID | ForcepointDLP_ModelingRule |
|---|---|
| From Version | 8.15.0 |
| Tags | Forcepoint DLP |
Schema
forcepoint_forcepoint_dlp_raw
| Field | Type | Array? |
|---|---|---|
_collector_source |
string | — |
act |
string | — |
action |
string | — |
analyzedBy |
string | — |
analyzed_by |
string | — |
cat |
string | — |
channel |
string | — |
destination |
string | — |
details |
string | — |
detected_by |
string | — |
duser |
string | — |
endpoint_type |
string | — |
event_id |
string | — |
eventid |
string | — |
file_name |
string | — |
fname |
string | — |
id |
string | — |
msg |
string | — |
policies |
string | — |
productVersion |
string | — |
severity |
string | — |
severityType |
string | — |
source |
string | — |
sourceHost |
string | — |
sourceIp |
string | — |
sourceServiceName |
string | — |
status |
string | — |
suser |
string | — |
tag |
string | — |
timeStamp |
datetime | — |
transaction_size |
int | — |