You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/authentication-normalization-schema.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -179,7 +179,9 @@ In the following tables, *Type* refers to a logical type. For more information,
179
179
| <aname="srcdvcid"></a>**SrcDvcId**| Optional | String | The ID of the source device. If multiple IDs are available, use the most important one, and store the others in the fields `SrcDvc<DvcIdType>`.<br><br>Example: `ac7e9755-8eae-4ffc-8a02-50ed7a2216c3`|
180
180
|**SrcDvcIdType**| Optional | DvcIdType | The type of [SrcDvcId](#srcdvcid). For a list of allowed values and further information refer to [DvcIdType](normalization-about-schemas.md#dvcidtype) in the [Schema Overview article](normalization-about-schemas.md). <br><br>**Note**: This field is required if [SrcDvcId](#srcdvcid) is used. |
181
181
|**SrcDeviceType**| Optional | DeviceType | The type of the source device. For a list of allowed values and further information refer to [DeviceType](normalization-about-schemas.md#devicetype) in the [Schema Overview article](normalization-about-schemas.md). |
182
+
|<aname="srcipaddr"></a>**SrcIpAddr**|Optional | IP Address|The IP address of the source device. <br><br>Example: `2.2.2.2`|
182
183
|**SrcDvcOs**|Optional |String |The OS of the source device. <br><br>Example: `Windows 10`|
184
+
|**IpAddr**| Alias || Alias to [SrcIpAddr](#srcipaddr)|
183
185
|**SrcIsp**| Optional|String |The Internet Service Provider (ISP) used by the source device to connect to the internet. <br><br>Example: `corpconnect`|
184
186
|**SrcGeoCountry**|Optional |Country |Example: `Canada` <br><br>For more information, see [Logical types](normalization-about-schemas.md#logical-types). |
185
187
|**SrcGeoCity**|Optional |City |Example: `Montreal` <br><br>For more information, see [Logical types](normalization-about-schemas.md#logical-types). |
@@ -193,7 +195,7 @@ In the following tables, *Type* refers to a logical type. For more information,
| <aname="dst"></a>**Src**| Recommended | String | A unique identifier of the authetication target. <br><br>This field may alias the [SrcDvcId](#srcdvcid), [SrcHostname](#srchostname), [SrcIpAddr](#srcipaddr), [TargetAppId](#targetappid), or [TargetAppName](#targetappname) fields. <br><br>Example: `192.168.12.1`|
198
+
| <aname="dst"></a>**Dst**| Recommended | String | A unique identifier of the authetication target. <br><br>This field may alias the [SrcDvcId](#targetdvcid), [SrcHostname](#targethostname), [TargetIpAddr](#targetipaddr), [TargetAppId](#targetappid), or [TargetAppName](#targetappname) fields. <br><br>Example: `192.168.12.1`|
197
199
| <aname="targetappid"></a>**TargetAppId**|Optional | String| The ID of the application to which the authorization is required, often assigned by the reporting device. <br><br>Example: `89162`|
198
200
|<aname="targetappname"></a>**TargetAppName**|Optional |String |The name of the application to which the authorization is required, including a service, a URL, or a SaaS application. <br><br>Example: `Saleforce`|
199
201
|**TargetAppType**|Optional |AppType |The type of the application authorizing on behalf of the Actor. For more information, and allowed list of values, see [AppType](normalization-about-schemas.md#apptype) in the [Schema Overview article](normalization-about-schemas.md).|
@@ -206,7 +208,7 @@ In the following tables, *Type* refers to a logical type. For more information,
206
208
| <aname="targetdvcid"></a>**TargetDvcId**| Optional | String | The ID of the target device. If multiple IDs are available, use the most important one, and store the others in the fields `TargetDvc<DvcIdType>`. <br><br>Example: `ac7e9755-8eae-4ffc-8a02-50ed7a2216c3`|
207
209
|**TargetDvcIdType**| Optional | Enumerated | The type of [TargetDvcId](#targetdvcid). For a list of allowed values and further information refer to [DvcIdType](normalization-about-schemas.md#dvcidtype) in the [Schema Overview article](normalization-about-schemas.md). <br><br>Required if **TargetDeviceId** is used.|
208
210
|**TargetDeviceType**| Optional | Enumerated | The type of the target device. For a list of allowed values and further information refer to [DeviceType](normalization-about-schemas.md#devicetype) in the [Schema Overview article](normalization-about-schemas.md). |
209
-
|<aname="targetdvcipaddr"></a>**TargetDvcIpAddr**|Optional | IP Address|The IP address of the target device. <br><br>Example: `2.2.2.2`|
211
+
|<aname="targetipaddr"></a>**TargetIpAddr**|Optional | IP Address|The IP address of the target device. <br><br>Example: `2.2.2.2`|
210
212
|**TargetDvcOs**| Optional| String| The OS of the target device. <br><br>Example: `Windows 10`|
211
213
|**TargetPortNumber**|Optional |Integer |The port of the target device.|
0 commit comments