Common Event Fields
All events include the fields below:
"events": [
{
"type": "THREAT",
"id": "1581",
"eventTime": "2017-01-03T20:59:41.000Z",
...
}
]
Field | Type | Description |
---|---|---|
|
enum | One of
THREAT, DEVICE, AUDIT. |
|
String | Unique ID that identifies the event. |
|
ISO 8601 String | Date and time of the event. |