Mappings: Aruba ClearPass User Authentication Successful
Input | Value |
---|---|
Vendor | HP |
Product | Aruba ClearPass |
Log Format | JSON |
Event ID Regex Pattern | User Authentication Successful |
Output | Value |
---|---|
Vendor | HP |
Product | Aruba ClearPass |
Record Type | Authentication |
Cloud SIEM Schema Field | Original Record Key | Notes |
---|---|---|
device_hostname | device_hostname | |
device_ip | device_ip | |
dstDevice_ip | serverip | |
normalizedAction | None | The static text logon is populated in this schema field. |
srcDevice_ip | ip | |
srcDevice_mac | macaddress | |
success | None | The static text true is populated in this schema field. |
user_role | role | |
user_username | username |