Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Administration Manual

Page: 153 / 168

Event Fields 153
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
InitServiceName sp The name of the initiating
service that caused this event. Y
InitServicePort spint The port used by the service/
application that initiated the
connection. Y
InitThreatLevel rv34 Initiator threat level.
InitUserDepartment iudep The department of the identity
associated with the initiating
account. Y
InitUserDomain rv35 The domain (namespace) in
which the initiating account
exists. Y
InitUserFullName iufname The full name of the identity
associated with the initiating
account. Y Y Y
InitUserID iuid The initiating account's source-
specific identifier as
determined by the Collector
based on raw device data. Y
InitUserIdentity iuident The internal UUID of the
identity associated with the
initiating account.
InitUserName sun The initiating user's account
name (SourceUsername). Y Y
NISPOM cv94 Set to 1 if the asset is governed
by National Industrial Security
Program Operating Manual
(NISPOM) regulation via an
asset map. (String)
ObserverChannel rv150 The channel on which the
observer delivered the event,
for multi-channel protocols. An
example would be the syslog
facility. (String; Stored in DB) Y
ObserverHostDomain obsdom The domain portion of the
observer's (sensor) fully
qualified hostname. Y
ObserverHostName sn The unqualified hostname of
the observer of the event
(SensorName). Y
ObserverIP obsip The IP address of the observer
(sensor) that detected the
event. Y
Field Short Name Description Tokenized
Visible in
Basic
View Visible in
Detailed
View