Portnox Modeling Rule

Modeling Rule

Portnox

Details

IDportnox_ModelingRule
From Version8.3.0
Tagsportnox

Schema

portnox_portnox_raw

Field Type Array?
SourceAddress string
_raw_log string
act string
alert_category string
cefDeviceEventClassId string
cefDeviceVersion string
cefVersion string
cn1 string
cs2 string
cs3 string
description string
destinationDnsDomain string
destinationServiceName string
device_ip string
dhost string
dmac string
dpt string
dst string
filePath string
group string
mac_address string
msg string
outcome string
policy string
shost string
sourceTranslatedPort string
{
  "portnox_portnox_raw": {
      "_raw_log": {
          "type": "string",
          "is_array": false
      },"act": {
          "type": "string",
          "is_array": false
      },"description": {
          "type": "string",
          "is_array": false
      },"alert_category": {
          "type": "string",
          "is_array": false
      },"device_ip": {
          "type": "string",
          "is_array": false
      },"policy": {
          "type": "string",
          "is_array": false
      },"mac_address": {
          "type": "string",
          "is_array": false
      },"group": {
          "type": "string",
          "is_array": false
      },"cn1": {
          "type": "string",
          "is_array": false
      },"cs2": {
          "type": "string",
          "is_array": false
      },"outcome": {
          "type": "string",
          "is_array": false
      },"cs3": {
          "type": "string",
          "is_array": false
      },"dpt": {
          "type": "string",
          "is_array": false
      },"dst": {
          "type": "string",
          "is_array": false
      },"msg": {
          "type": "string",
          "is_array": false
      },"dmac": {
          "type": "string",
          "is_array": false
      },"dhost": {
          "type": "string",
          "is_array": false
      },"shost": {
          "type": "string",
          "is_array": false
      },"filePath": {
          "type": "string",
          "is_array": false
      },"SourceAddress": {
          "type": "string",
          "is_array": false
      },"destinationDnsDomain": {
          "type": "string",
          "is_array": false
      },"sourceTranslatedPort": {
          "type": "string",
          "is_array": false
      },"destinationServiceName": {
          "type": "string",
          "is_array": false
      },"cefVersion": {
          "type": "string",
          "is_array": false
      },"cefDeviceEventClassId": {
          "type": "string",
          "is_array": false
      },"cefDeviceVersion": {
          "type": "string",
          "is_array": false
      }
  }
}