netapp

Expression

product = "netapp"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	file_path	Legacy			✓
	access
	file_name	Legacy	✓
	file_dir	Legacy			✓
	domain_user_name
	object_id
	object_server
	result
	src_ip	Legacy	✓	✓
	file_ext
	event_code
	process_name	Legacy		✓
	domain
	user_sid
	process_path	Legacy		✓
	operation
	object_class
	user	Legacy		✓
file-delete	severity
	src_ip
	access	Legacy		✓
	user_id
	file_type	Legacy			✓
	dest_ip
	file_id
	dest_host	Legacy		✓
	category
	user	Legacy	✓	✓
	file_permissions
file-read	severity
	src_ip
	access	Legacy		✓
	user_id
	file_type	Legacy			✓
	dest_ip
	file_id
	dest_host	Legacy		✓
	category
	user	Legacy	✓	✓
	file_permissions
file-write	severity
	src_ip
	access	Legacy		✓
	user_id
	file_type	Legacy			✓
	dest_ip
	file_id
	dest_host	Legacy		✓
	category
	user	Legacy	✓	✓
	file_permissions