ping identity

Expression

product = "ping identity"

Fields

Field	Core	Detection	Informational
src_ip			✓
protocol			✓
connection_id			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	additional_info	Default			✓
	domain	Default			✓
	event_name	Default			✓
	domain_user_name
	category	Default			✓
	user	Default		✓
	user_agent	Default			✓
	url	Default			✓
	alert_name	Default			✓
app-authentication	local_user_id	Default			✓
	role	Default			✓
	os	Default			✓
	src_host	Default		✓
	auth_method	Default			✓
	additional_info	Default			✓
	dest_ip	Default		✓
	browser	Default			✓
	dest_host	Default		✓
	event_name	Default			✓
	response_time	Default			✓
	attributes	Default			✓
	device	Default			✓
	tracking_id	Default			✓
	user_agent	Default			✓
	adopter_id	Default			✓
app-login	country	Default			✓
	requested_app	Default			✓
	os	Default			✓
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	auth_method	Default			✓
	additional_info	Default			✓
	dest_ip	Default		✓
	dest_host	Default		✓
	event_name	Default			✓
	requested_app_id	Default			✓
	category	Default			✓
	alert_name	Default			✓
	user_agent	Default			✓
user-password-modify	local_user_id	Default			✓
	role	Default			✓
	response_time	Default			✓
	attributes	Default			✓
	user	Default		✓
	tracking_id	Default			✓
	adopter_id	Default			✓
user-password-reset	local_user_id
	role
	response_time
	attributes
	tracking_id
	adopter_id
vpn-login	country	Default			✓
	requested_app	Default			✓
	os	Default			✓
	requested_app_id	Default			✓
	device	Default			✓