Mappings: Tanium ES Logs
Input | Value |
---|---|
Vendor | tanium |
Product | tanium |
Log Format | JSON |
Event ID Regex Pattern | tanium:es |
Output | Value |
---|---|
Vendor | Tanium |
Product | Tanium Core |
Record Type | Endpoint |
Cloud SIEM Schema Field | Original Record Key | Notes |
---|---|---|
device_hostname | Attributes.Computer-Name | |
device_ip | Attributes.Tanium-Client-IP-Address | |
user_username | Attributes.Last-Logged-In-User |