Ahnlab EPP EDR Audit
EDR_AGENT_EVENT Event
Type | Field | Display Name | Description |
---|---|---|---|
Date | _time | Time | |
String | event_id | Event ID | |
IP address | src_ip | Source IP | |
String | src_mac | Source MAC | |
String | hostname | Hostname | |
String | user | Account | |
String | level | Level | e.g. INFO |
String | function_text | Function | |
String | msg | Message | |
Date | client_time | Client time | |
String | function | Function ID | e.g. 11402 |
String | node_id | Node ID | e.g. 13 |
String | log_string_id | Log template ID | e.g. APM_LOGID_9000 |
String | log_string_args | Log template args | |
String | data_uuid | Data UUID |