日志参数 - 简书

日志参数

SecDeviceName:SecureSphereSecdeviceVersion: $!{SecureSphereVersion}RiskLevel:$ !{Alert.severity}ImmediateAction: $!{Alert.immediateAction}DestUser:$ !{Alert.username}SrcIp: $!{Event.sourceInfo.sourceIp}SrcPort:$ !{Event.sourceInfo.sourcePort}DestIp: $!{Event.destInfo.serverIp}DestPort:$ !{Event.destInfo.serverPort}PolicyName: $!{Rule.parent.displayName}RuleName:$ !{Alert.alertMetadata.alertName}ServerGroup: $!{Alert.serverGroupName}ServiceName:$ !{Alert.serviceName}PolicyParameter: $!{Alert.description}ViolationType:$ !{Event.eventType}AlertNumber: $!{Event.irregularBehaviors.alert.dn}ViolationDescription:$ !{ViolationDescription}ViolatedItem: $!{Event.violations.violatedItem}HostName:$ !{Event.struct.httpRequest.url.host}SessionId: $!{Event.struct.session.id}EventId:$ !{Event.dn}ResponseCode: $!{Event.struct.httpResponse.responseCode}ResponseSize:$ !{Event.struct.responseSize}ResponseTime: $!{Event.struct.responseTime}RequestMethod:$ !{Event.struct.httpRequest.url.method}RequestUri: $!{Event.struct.httpRequest.url.path}RequestUrl:$ !{Event.struct.httpRequest.url.fullPath}RequestQueryString: $!{Event.struct.httpRequest.url.queryString}Time:$ !{Alert.createTime}AlertUpdateTime: $!{Alert.lastUpdateTime}ParameterName:$ !{Event.struct.httpRequest.parameters.name}ParameterValue: $!{Event.struct.httpRequest.parameters.charType}CookieName:$ !{Event.struct.httpRequest.cookies.name}CookieValue: $!{Event.struct.httpRequest.cookies.value}UserAgent:$ !{Event.UserAgent}CookieTraceabilityState: $!{Event.struct.httpRequest.cookies.traceabilityState}HeaderName:$ !{Event.struct.httpRequest.headers.name}HeaderValue: $!{Event.struct.httpRequest.headers.value}ViolatedHeader:$ !{Event.struct.httpRequest.headers.violatedHeader}ParameterBindingC: $!{Event.struct.httpRequest.parameters.bindingClassification}ParameterIgnored:$ !{Event.struct.httpRequest.parameters.ignored}ParameterLocaleSize: $!{Event.struct.httpRequest.parameters.localeSize}ParameterParamOrigin:$ !{Event.struct.httpRequest.parameters.paramOrigin}ParameterViolatedParameter: $!{Event.struct.httpRequest.parameters.violatedParameter}RpCookieDomain:$ !{Event.struct.httpResponse.cookies.domain}RpCookieExpiration: $!{Event.struct.httpResponse.cookies.expiration}RpCookieName:$ !{Event.struct.httpResponse.cookies.name}RpCookiePath: $!{Event.struct.httpResponse.cookies.path}RpCookiePersistent:$ !{Event.struct.httpResponse.cookies.persistent}RpCookieSecure: $!{Event.struct.httpResponse.cookies.secure}RpCookieValue:$ !{Event.struct.httpResponse.cookies.value}RpHeaderName: $!{Event.struct.httpResponse.headers.name}RpHeaderValue:$ !{Event.struct.httpResponse.headers.value}RpHeaderVioHeader:$!{Event.struct.httpResponse.headers.violatedHeader}

最后编辑于：2019.05.28 10:01:33