Ahnlab EPP EDR Audit
EDR_AGENT_EVENT Event
| Type | Field | Display Name | Description |
|---|---|---|---|
| Date | _time | Time | |
| String | event_id | Event ID | |
| IP address | src_ip | Source IP | |
| String | src_mac | Source MAC | |
| String | hostname | Hostname | |
| String | user | Account | |
| String | level | Level | e.g. INFO |
| String | function_text | Function | |
| String | msg | Message | |
| Date | client_time | Client time | |
| String | function | Function ID | e.g. 11402 |
| String | node_id | Node ID | e.g. 13 |
| String | log_string_id | Log template ID | e.g. APM_LOGID_9000 |
| String | log_string_args | Log template args | |
| String | data_uuid | Data UUID |