imperva securesphere

Expression

product = imperva securesphere

Fields

Field	Core	Detection	Informational
src_ip		✓
domain		✓
dest_ip		✓
dest_host			✓
fallback_user_name
domain_user_name
src_host			✓
user		✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	app
	server_group
	service_name
	local_user_name
	src_host	Legacy	✓	✓
	src_ip	Legacy	✓	✓
	src_port	Legacy			✓
	db_name
	additional_info
	alert_id	Legacy			✓
	dest_ip	Legacy	✓	✓
	dest_host	Legacy		✓
	user	Legacy		✓
	db_schema
database-delete	src_port
	db_name
	service_name
	operation
	dest_port
database-login	src_port	Default			✓
	server_group	Default			✓
	protocol	Default			✓
	db_name	Default			✓
	service_name	Default			✓
	db_schema	Default			✓
	dest_port	Default			✓
database-modify	src_port
	server_group
	bytes_out
	db_name
	service_name
	operation
	db_schema
	dest_port
database-query	src_port
	server_group
	bytes_out
	db_name
	service_name
	operation
	db_schema
	dest_port