Mappings: Tanium ES Logs
| Input | Value |
|---|---|
| Vendor | tanium |
| Product | tanium |
| Log Format | JSON |
| Event ID Regex Pattern | tanium:es |
| Output | Value |
|---|---|
| Vendor | Tanium |
| Product | Tanium Core |
| Record Type | Endpoint |
| Cloud SIEM Schema Field | Original Record Key | Notes |
|---|---|---|
| device_hostname | Attributes.Computer-Name | |
| device_ip | Attributes.Tanium-Client-IP-Address | |
| user_username | Attributes.Last-Logged-In-User |