Filter keywords

accessedObjects.fullName

string

Accessed object full name

accessedObjects.Name

string

Accessed object name

accessedObjects.Owner

string

Accessed object owner

accessedObjects.type

string

Accessed object type

action

string

Action

applicationId

string

Application ID

batchCmdTypes

string

Batch command types

bindVars.name

string

Bind variable name

bindVars.type

string

Bind variable type

bindVars.value

string

Bind variable value

clientAcctstr

string

Client accounting

clientApplName

string

Client application name

clientHostName

string

Client hostname

clientId

string

Client ID

clientInfo

string

Client info

clientIp

string

Client IP address

clientName

string

Client name

clientWrkstnname

string

Client workstation name

cmdType

string

Command type

connectionType

string

Connection type

contextInfo

string

Context info

database.name

string

Database name

database.type

string

Database type

database.version

string

Database version

dbContainer

string

Database containter (Oracle 12c)

enduserAction

string

End user action

enduserIP

string

End user IP address

enduserModule

string

End user module

enduserName

string

End username

errorCode

string

Returned error code

execUser

string

Database username

executionTime

date

Event execution time

inflowObjects.fullName

string

Inflow SQL - accessed object full name

inflowObjects.name

string

Inflow SQL - accessed object name

inflowObjects.owner

string

Inflow SQL - accessed object owner

inflowObjects.type

string

Inflow SQL - accessed object type

inflowSQL

string

Inflow SQL - statement

lastWorkFlow.assignedBy

string

Workflow assigned by

lastWorkFlow.assignee

string

Workflow assignee

lastWorkFlow.comment

string

Workflow comment

lastWorkFlow.date

date

Workflow update date

lastWorkFlow.resolution

string

Workflow resolution

logonTime

date

Session login time

module

string

Module name

netHost

string

Network resolved hostname

netIP

ip

Network resolved IP address

osUser

string

Operating system username

rules.id

string

Triggered rule ID

rules.name

string

Triggered rule name

rules.type

string

Triggered rule type

schema

string

Database schema

sensor.host

string

Sensor host

sensor.id

string

Sensor ID

sensor.ip

ip

Sensor IP address

sensor.name

string

Sensor name

sessionActions

string

Session triggered actions

severity

number

Severity (1-5) where 5 is highest

sid

number

Session ID

sourceHost

string

Source host

sourceIP

ip

Source IP address

sqlStatement

string

SQL statament

stmtHash

string

Statement Hash

terminal

string

Terminal name