ibm db2

Expression

product = ibm db2

Fields

Field	Core	Detection	Informational
src_host			✓
category			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	result
	src_ip	Legacy	✓	✓
	additional_info
	alert_id	Legacy			✓
	dest_ip	Legacy	✓	✓
	dest_host	Legacy		✓
	malware_url
	user	Legacy		✓
database-login	src_ip	Default		✓
	auth_type	Default			✓
	db_name	Default			✓
	additional_info	Default			✓
	process_name	Default			✓
	event_code	Default			✓
	db_user	Default		✓
	event_name	Default			✓
	operation	Default			✓
	db_schema	Default			✓
	object	Default			✓
	database_user_name
database-modify	src_ip	Legacy			✓
	auth_type
	db_name
	event_code
	db_user	Legacy			✓
	event_name
	db_schema
	database_user_name
	object
file-read	additional_info
	process_name	Legacy			✓
	operation
	user	Legacy	✓	✓