API1 common fields
You can specify these fields in the FIELDS parameter of any EVENT statement.
Name | Tag | Description |
|---|---|---|
EventNonSMFIdent | EventNonSMFIdent | API1 event identifier Used to send non-SMF, event-record identifier values to the Security Information and Event Management (SIEM) service. |
EventNonSMFLength | Len | Length of the API1 record Defined as a Universal field but valid only for non-SMF (API 1) events. |
EventNonSMFMinor | EventNonSMFMinor | Minor event type Defined as a Universal field but valid only for non-SMF (API 1) events. |
EventNonSMFSeverity | EventNonSMFSeverity | Severity (API1 Events only) Defined as a Universal field but valid only for non-SMF (API 1) events. |
EventNonSMFSubType | EventNonSMFSubType | Subtype if non-SMF Defined as a Universal field but valid only for non-SMF (API 1) events. |
Related topic