![]() Field name values use lowercase characters.Field type values use CamelCase characters.This document uses style conventions to help you identify the differences: ![]() Please Note: Field name and field type values can look similar. When writing configuration-based normalizer (CBN) parsers, use the pattern "_only_udm" for UDM Event fields and "" for UDM Entity fields. When writing rules for Detect Engine, use the pattern "$u" for Eventįields and "$e" for Entity fields. When specifying a field, use the following format. This document provides a list of fields available in the Unified Data Model schema. Save money with our transparent approach to pricing Rapid Assessment & Migration Program (RAMP) Migrate from PaaS: Cloud Foundry, OpenshiftĬOVID-19 Solutions for the Healthcare Industry Ingestion metrics field reference for dashboards.Mapping changes in Palo Alto Networks firewall parser.Mapping changes in Cisco ASA firewall parser.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |