home

Mobile Endpoint Security

Mobile Endpoint SecuritySecurity Service Edge
Mobile Endpoint SecuritySecurity Service Edge

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Show Contents

Mobile Endpoint Security

Mapping Lookout Events to QRadar LEEF Fields

Common Event Fields

These fields are present in all Lookout events.

Lookout event fieldTypeLEEF fieldDescription
n/a - static
String 
Vendor
Static value of Lookout.
n/a - static
String 
Product
Static value of SIEM Client.
n/a - static
String 
Version
The Lookout Mobile Threat Defense client version.
n/a - configured via UI
String 
lookoutEntName
The Enterprise Name entered during the application configuration.
event.type,
<varies>

enum,

enum

 
EventID
The event ID derived from a concatenation of the Lookout event.type ( THREAT, DEVICE, AUDIT) and a cat field dependent on the event.type. See the following sections for specifics on each event type.
event.id
String 
lookoutId
Unique ID of the event.
event.eventTime
DateTime 
lookoutEventTime
Date and time of the event.

Last updated: September 30, 2024

lookout-footer

Legal Privacy Policy Cookie Policy Transparency Report Compliance Info Compliance Info (Gov)

© 2024 Lookout, Inc. LOOKOUT®, the Lookout Shield Design®, LOOKOUT with Shield Design® and the Lookout multi-color/multi-shaded Wingspan Design® are registered trademarks of Lookout, Inc. in the United States and other countries. DAY OF SHECURITY®, LOOKOUT MOBILE SECURITY®, and POWERED BY LOOKOUT® are registered trademarks of Lookout, Inc. in the United States. Lookout, Inc. maintains common law trademark rights in EVERYTHING IS OK, PROTECTED BY LOOKOUT, CIPHERCLOUD, and the 4 Bar Shield Design.