Mappings: Cisco ASA 113005 JSON
Input | Value |
---|---|
Vendor | Cisco |
Product | ASA |
Log Format | JSON |
Event ID Regex Pattern | ^113005$ |
Output | Value |
---|---|
Vendor | Cisco Systems |
Product | ASA |
Record Type | Authentication |
Cloud SIEM Schema Field | Original Record Key | Notes |
---|---|---|
action | action | |
cause | reason | |
dstDevice_hostname | dest_host | |
dstDevice_ip | dest_ip | |
normalizedAction | None | The static text logon is populated in this schema field. |
severity | severity | |
srcDevice_ip | source_ip | |
success | None | The static text false is populated in this schema field. |
user_username | user |