illumio core

Expression

product = "illumio core"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
network-session	process_id	Default			✓
	alert_severity	Default			✓
	domain_user_name
	src_host	Default		✓
	uri_path	Default			✓
	web_domain	Default			✓
	process_name	Default			✓
	domain	Default			✓
	dest_host	Default		✓
	action	Default			✓
	location	Default			✓
	category	Default			✓
	user	Default		✓
	direction	Default			✓