ProofpointServerProtection Modeling Rule

Modeling Rule

Proofpoint Protection Server

Details

IDProofpointServerProtection_ModelingRule
From Version8.3.0
Tagsproofpoint

Schema

proofpoint_ps_raw

Field Type Array?
_raw_log string
parsed_fields string
{
    "proofpoint_ps_raw": {
        "parsed_fields": {
            "type": "string",
            "is_array": false
        },
        "_raw_log": {
            "type": "string",
            "is_array": false
        }
    }
  }