File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -135,8 +135,8 @@ Fields that appear in the table below are common to all ASIM schemas. Any guidel
135
135
| ** Class** | ** Fields** |
136
136
| --------- | ---------- |
137
137
| Mandatory | - [ EventCount] ( normalization-common-fields.md#eventcount ) <br > - [ EventStartTime] ( normalization-common-fields.md#eventstarttime ) <br > - [ EventEndTime] ( normalization-common-fields.md#eventendtime ) <br > - [ EventType] ( normalization-common-fields.md#eventtype ) <br >- [ EventResult] ( normalization-common-fields.md#eventresult ) <br > - [ EventProduct] ( normalization-common-fields.md#eventproduct ) <br > - [ EventVendor] ( normalization-common-fields.md#eventvendor ) <br > - [ EventSchema] ( normalization-common-fields.md#eventschema ) <br > - [ EventSchemaVersion] ( normalization-common-fields.md#eventschemaversion ) <br > - [ Dvc] ( normalization-common-fields.md#dvc ) <br >|
138
- | Recommended | - [ EventResultDetails] ( normalization-common-fields.md#eventresultdetails ) <br >- [ EventSeverity] ( normalization-common-fields.md#eventseverity ) <br > - [ DvcIpAddr] ( normalization-common-fields.md#dvcipaddr ) <br > - [ DvcHostname] ( normalization-common-fields.md#dvchostname ) <br > - [ DvcDomain] ( normalization-common-fields.md#dvcdomain ) <br >- [ DvcDomainType] ( normalization-common-fields.md#dvcdomaintype ) <br >- [ DvcFQDN] ( normalization-common-fields.md#dvcfqdn ) <br >- [ DvcId] ( normalization-common-fields.md#dvcid ) <br >- [ DvcIdType] ( normalization-common-fields.md#dvcidtype ) <br >- [ DvcAction] ( normalization-common-fields.md#dvcation ) |
139
- | Optional | - [EventMessage](normalization-common-fields.md#eventmessage)<br> - [EventSubType](normalization-common-fields.md#eventsubtype)<br>- [EventOriginalUid](normalization-common-fields.md#eventoriginaluid)<br>- [EventOriginalType](normalization-common-fields.md#eventoriginaltype)<br>- [EventOriginalSubType](normalization-common-fields.md#eventoriginalsubtype)<br>- [EventOriginalResultDetails](normalization-common-fields.md#eventoriginalresultdetails)<br> - [EventOriginalSeverity](normalization-common-fields.md#eventoriginalserverity) <br> - [EventProductVersion](normalization-common-fields.md#eventproductversion)<br> - [EventReportUrl](normalization-common-fields.md#eventreporturl)<br>- [DvcMacAddr](normalization-common-fields.md#dvcmacaddr)<br>- [DvcOs](normalization-common-fields.md#dvcos)<br>- [DvcOsVersion](normalization-common-fields.md#dvchostname)<br>- [DvcOriginalAction](normalization-common-fields.md#dvcoriginalaction)<br>- [DvcInterface](normalization-common-fields.md#dvcinterfacee)<br>- [AdditionalFields](normalization-common-fields.md#additionalfields)|
138
+ | Recommended | - [ EventResultDetails] ( normalization-common-fields.md#eventresultdetails ) <br >- [ EventSeverity] ( normalization-common-fields.md#eventseverity ) <br > - [ DvcIpAddr] ( normalization-common-fields.md#dvcipaddr ) <br > - [ DvcHostname] ( normalization-common-fields.md#dvchostname ) <br > - [ DvcDomain] ( normalization-common-fields.md#dvcdomain ) <br >- [ DvcDomainType] ( normalization-common-fields.md#dvcdomaintype ) <br >- [ DvcFQDN] ( normalization-common-fields.md#dvcfqdn ) <br >- [ DvcId] ( normalization-common-fields.md#dvcid ) <br >- [ DvcIdType] ( normalization-common-fields.md#dvcidtype ) <br >- [ DvcAction] ( normalization-common-fields.md#dvcaction ) |
139
+ | Optional | - [EventMessage](normalization-common-fields.md#eventmessage)<br> - [EventSubType](normalization-common-fields.md#eventsubtype)<br>- [EventOriginalUid](normalization-common-fields.md#eventoriginaluid)<br>- [EventOriginalType](normalization-common-fields.md#eventoriginaltype)<br>- [EventOriginalSubType](normalization-common-fields.md#eventoriginalsubtype)<br>- [EventOriginalResultDetails](normalization-common-fields.md#eventoriginalresultdetails)<br> - [EventOriginalSeverity](normalization-common-fields.md#eventoriginalseverity) <br> - [EventProductVersion](normalization-common-fields.md#eventproductversion)<br> - [EventReportUrl](normalization-common-fields.md#eventreporturl)<br>- [DvcMacAddr](normalization-common-fields.md#dvcmacaddr)<br>- [DvcOs](normalization-common-fields.md#dvcos)<br>- [DvcOsVersion](normalization-common-fields.md#dvchostname)<br>- [DvcOriginalAction](normalization-common-fields.md#dvcoriginalaction)<br>- [DvcInterface](normalization-common-fields.md#dvcinterface)<br>- [AdditionalFields](normalization-common-fields.md#additionalfields)|
140
140
|||
141
141
142
142
### Network session fields
You can’t perform that action at this time.
0 commit comments